CVE:CVE-2018-0412
CNNVD:CNNVD-201808-460
Cisco Small Business 100 Series Wireless Access Points和Small Business 300 Series Wireless Access Points都是美国思科（Cisco）公司的不同系列的无线接入点产品，它提供高容量的无线局域网和访客接入服务等功能。
Cisco Small Business 100 Series Wireless Access Points和Small Business 300 Series Wireless Access Points中的Extensible Authentication Protocol over LAN (EAPOL)功能的实现存在加密问题漏洞，该漏洞源于在Wi-Fi握手进程中程序没有正确地处理接收到的EAPOL消息。攻击者可通过实施中间人攻击并操纵EAPOL信息的交换利用该漏洞使用户使用WPA-TKIP加密算法，泄露敏感信息。
solution:Upgrade cisco wap121_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap125_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap131_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap150_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap321_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap351_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap361_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]; Upgrade cisco wap371_firmware to a higher version than 1.0.6.6,and avoid the version (,1.0.6.6]