Resource exhaustion in Cisco Aironet 1542d
CVE-2020-3260
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.005 (38.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 38.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Cisco Aironet 1542d
- Cisco Aironet 1542d Firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet 1542i
- Cisco Aironet 1542i Firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet 1815
- Cisco Aironet 1815 Firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet 1830
- Cisco Aironet 1830 Firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet 1840
- Cisco Aironet 1840 Firmware — versions 8.9\(100.0\), 8.9(100.0)
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3260?
- CVE-2020-3260 is a medium-severity vulnerability in Cisco Aironet 1542d, classified under CWE-399. CVSS score: 6.5/10. Published 2020-04-15.
- How severe is CVE-2020-3260?
- Medium severity. CVSS v3 base score is 6.5 out of 10.