Resource exhaustion in Cisco Aironet Access Point Software
CVE-2020-3559
A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the A…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.013 (79.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Aironet Access Point Software — versions n/a
Weakness classification (CWE)
References
- 20200924 Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability (vendor-advisory, x_refsource_CISCO)
Frequently asked questions
- What is CVE-2020-3559?
- CVE-2020-3559 is a medium-severity vulnerability in Cisco Aironet Access Point Software, classified under Uncontrolled Resource Consumption. CVSS score: 6.8/10. Published 2020-09-24.
- How severe is CVE-2020-3559?
- Medium severity. CVSS v3 base score is 6.8 out of 10.