CVE-2005-3482
Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:N/I:P/A:N- EPSS score
- 1.6% (75th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2005-3481)
- Published
- November 3, 2005
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2005-3481 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / aironet ap1131
- cisco / aironet ap1200
- cisco / aironet ap1240
Certified products that may be affected
4 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252, AP1262, CAP3502e and CAP3502i Wireless LAN Access Points - Cisco Systems, Inc. - FIPS 140 1448 - historical
- Cisco Aironet Lightweight AP1131, AP1142, AP1242, AP1252 and AP1522 Wireless LAN Access Points - Cisco Systems, Inc. - FIPS 140 1188 - historical
- Cisco Aironet LWAPP AP1131AG and AP1242AG Wireless LAN Access Points - Cisco Systems, Inc. - FIPS 140 913 - historical
- Cisco Aironet LWAPP AP1131AG, Cisco Aironet LWAPP AP1231G, Cisco Aironet LWAPP AP1232AG, and Cisco Aironet LWAPP AP1242AG Wireless Access Points - Cisco Systems, Inc. - FIPS 140 695 - historical
References
- http://secunia.com/advisories/17406
- http://securityreason.com/securityalert/139
- http://securitytracker.com/id?1015140
- http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml(Patch, Vendor Advisory)
- http://www.osvdb.org/20454
- http://www.securityfocus.com/bid/15272
- http://www.vupen.com/english/advisories/2005/2278
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain