CVE-2009-2861: The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200...

Security readout for executives and security teams

This issue affects Cisco Aironet Lightweight Access Point 1100 and 1200 devices using OTAP. An attacker within wireless reach could impersonate a controller and disrupt access point service, causing a wireless outage. The supplied sources do not provide a CVSS score, patch details, or evidence of active exploitation. Exposure is most likely in organizations still operating legacy Cisco Aironet 1100 or 1200 lightweight access points with OTAP enabled or reachable over wireless. Modern environments without these models are unlikely to be affected, based on the supplied sources. Prioritize this if legacy Cisco Aironet 1100 or 1200 access points support important sites. The business impact is wireless service disruption, not data theft in the supplied sources. If those devices are absent, priority is low after documentation of non-exposure. Mitigation focus: Review Cisco Alert 18919 for official fixes, configuration guidance, and affected software scope.; Inventory Cisco Aironet 1100 and 1200 lightweight access points still in production.; Disable OTAP if Cisco guidance supports doing so safely..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.