CVE-2016-9220: A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 an...

Security readout for executives and security teams

This Cisco Mobility Express 2800/3800 AP issue lets an unauthenticated attacker within wireless range fill the AP connection table with invalid entries. The business effect is denial of service: legitimate users may be unable to create new wireless connections. The sources identify fixed Cisco software releases, but do not provide a CVSS score. Exposure is limited to organizations running Cisco Mobility Express 2800 or 3800 APs on the affected release, especially where attackers can get within wireless range. Internet exposure is not indicated by the sources. Treat as a service-availability risk, not a data-theft issue based on the provided evidence. Patch during the next suitable wireless maintenance window, faster for high-dependency sites such as offices, warehouses, healthcare areas, or guest networks. Mitigation focus: Upgrade affected APs to a Cisco-listed fixed release for the relevant branch.; Check Cisco advisory guidance before choosing a target release.; Prioritize sites where wireless availability is business-critical..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.