Cisco Cisco Aironet 1200 Access Point

Cisco has made free software available to address these vulnerabilities for affected customers. Fixed 
Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all 
vulnerabilities mentioned in this advisory.

There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from 
disabling the protocol or feature itself. 

This advisory is posted at 

CSCeh43628—1230 series access point no longer exhibits DHCP failure when client is configured 
for mixed mode (CKIP and 128-key WEP).

CSCeh49024—Memory leak no longer occurs when an invalid layer 3 WLCCP packet is received.

CSCsa42443—Autoinstall program now uses hostname from DHCP (if present) when access point 
is booted with factory defaults.

CSCsa66924—Access point no longer crashes and reboots when policy-map command is issued.

CSCsa71255—Logging snmp-trap no longer returns to default after reboot.

CSCeh26214—IP RADIUS source interface no longer disappears after reboot.

CSCei07867—RM22A radio output power for different channels has been documented in the 
appropriate hardware installation guides.

CSCsb06824—Open authentication is no longer added to an EAP SSID when the configuration is 
loaded.

CSCsa73846 (duplicate of CSCed16920)—350 series access point no longer shows high CPU and 
TTY background tracebacks.

CSCsa78495—LRS configured 1200 series access point now updates unknown username count.

CSCsa88841—DFS-IAPP constant has been changed to 0x34.

CSCsb09778 (duplicate of CSCsb06218)—1130 and 1200 access point boot loaders now boot IOS 
when environment variables are deleted from flash.

CSCsb27662—Reports greater than 7900 bytes are no longer dropped by WLSE at RM AGG.

CSCsb06236—CCKM repeater no longer hangs during access point radio scan.

CSCsa90752—Trunking no longer fails on an 1100 series access point when in workgroup bridge 
mode.

CSCeh97288 (duplicate of CSCsa79281)—Spectralink phones no longer reboot after upgrading to 
Cisco IOS Release 12.3(4)JA

CSCsb11227—1130 series access points operating as a WDS no longer run out of memory.

CSCsb14224—Reverse ARP functions on all VLANs

CSCeb52431—The 1100 series access point no longer sends hundreds of additional authentication 
requests to a TACACS+ server after successful authentication.

CSCef95410—WLCCP packets received from an access point no longer causes the radio interface 
output drop counter to increment.

CSCsa67267—The mbssid command no longer fails on the CLI and the GUI. 

CSCef11167—The access point now returns an accurate value when you poll 
cDot11ActiveWirelessClients through SNMP.

CSCeh38024—Access point WPAv2 migration mode now supports Cisco Aironet CB20A client 
radios running firmware version 2.0.0.184 configured for optional WPAv2.