CVE-2018-0412

CVE-2018-0412 is a medium-severity vulnerability affecting Cisco Small Business 100 and 300 Series Wireless Access Points. It allows an unauthenticated, adjacent attacker to force a downgrade of the Wi-Fi encryption algorithm from AES-CCMP to the weaker WPA-TKIP during the EAPOL handshake. This improper processing of EAPOL messages enables a man-in-the-middle attack, potentially leading to subsequent cryptographic attacks and disclosure of confidential information. The CVSS score is 5.3 (MEDIUM) due to an adjacent attack vector and high integrity impact, but high attack complexity. There is no known active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.