CVE-2021-1615

CVE-2021-1615 describes a denial-of-service vulnerability in Cisco Embedded Wireless Controller Software for Catalyst Access Points, affecting various Catalyst 9100 series APs. The vulnerability stems from insufficient buffer allocation during packet processing. An unauthenticated, remote attacker can exploit this by sending crafted traffic, leading to resource exhaustion and a DoS condition for both the AP and client traffic. While rated as HIGH severity (CVSS 8.6), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.