Resource exhaustion in Cisco Aironet 1542d
CVE-2020-3260
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.
EPSS: 0.005 (38.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Cisco Aironet_1542d
- Cisco Aironet_1542d_firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet_1542i
- Cisco Aironet_1542i_firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet_1815
- Cisco Aironet_1815_firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet_1830
- Cisco Aironet_1830_firmware — versions 8.9\(100.0\), 8.9(100.0)
- Cisco Aironet_1840
- Cisco Aironet_1840_firmware — versions 8.9\(100.0\), 8.9(100.0)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3260?
- CVE-2020-3260 is a medium-severity vulnerability in Cisco Aironet 1542d, classified under CWE-399. CVSS score: 6.5/10. Published 2020-04-15.
- How severe is CVE-2020-3260?
- Medium severity. CVSS v3 base score is 6.5 out of 10.