What is CVE-2019-15264?

CVE-2019-15264 is a medium-severity vulnerability in Cisco Aironet_1540, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2019-10-16.

How severe is CVE-2019-15264?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Resource exhaustion in Cisco Aironet_1540

CVE-2019-15264

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an affected device…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cisco Aironet_1540
Cisco Aironet_1540_firmware
Cisco Aironet_1560
Cisco Aironet_1560_firmware
Cisco Aironet_1800
Cisco Aironet_1850_firmware — versions 8.9\(1.249\), 8.9\(1.255\), 8.9\(4.28\)
Cisco Aironet_2800
Cisco Aironet_2800_firmware
Cisco Aironet_3800
Cisco Aironet_3800_firmware

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-15264?: CVE-2019-15264 is a medium-severity vulnerability in Cisco Aironet_1540, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2019-10-16.
How severe is CVE-2019-15264?: Medium severity. CVSS v3 base score is 6.5 out of 10.