The version 15.3(3)JF15 is a specific maintenance release within the 15.3(3)J train.
The AP3600 is an 802.11n (Wi-Fi 4) device with 3x4:3 streams, maximum 450 Mbps per radio. The JF15 image does not enable 802.11ac features – that requires 3700/3800 series. Do not expect Wave 2 performance.
This file is used to upgrade or recover a Cisco Aironet 3600/3700 series AP, usually via TFTP or the bootloader. It can be used for both lightweight (controller-based) and autonomous modes, depending on the exact image content. ap3g1-k9w7-tar.153-3.jf15.tar
Release 15.3(3)JF15 predates fixes for several critical CVEs:
| CVE | Description | Affected? | Fixed in | |------------|-------------|-----------|-----------| | CVE-2019-15271 | AP DoS via crafted HTTPS request | Yes | 15.3(3)JF16 | | CVE-2019-12643 | 802.11r overflow | Yes | 15.3(3)JF17 | | CVE-2020-3517 | CAPWAP DTLS memory leak | Yes | 15.3(3)JF18 | | CVE-2021-1530 | Privilege escalation in CLI | Yes | 15.3(3)JF20 | The version 15
Risk: Devices running JF15 remain vulnerable to remote code execution (RCE) or crash loops.
Summary: This file turns a Cisco 3600/3700 series Access Point into a fully autonomous router/AP running IOS version 15.3(3)JF15. Summary: This file turns a Cisco 3600/3700 series
Before upgrading, ensure you have:
Public exploits exist for:
Metasploit module auxiliary/dos/cisco/cve_2019_15271_ap_dos works against JF15.