Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability (Cisco Cisco Aironet Access Point Software)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.46 % · percentile 40 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Modified
Description
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.
Weaknesses (CWE)
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.4 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | cisco |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.0 | HIGH 7.4 | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | NVD · psirt@cisco.com (Secondary) |
| CVSS 2.0 | LOW 3.3 | AV:A/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2020-24531
- GCVE · GCVE-0-2020-3260
CERT-FR advisories
- CERTFR-2020-AVI-227 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:cisco:aironet_1542i_firmware:8.9\(100.0\):*:*:*:*:*:*:*cpe:2.3:o:cisco:aironet_1542d_firmware:8.9\(100.0\):*:*:*:*:*:*:*cpe:2.3:o:cisco:aironet_1815_firmware:8.9\(100.0\):*:*:*:*:*:*:*cpe:2.3:o:cisco:aironet_1830_firmware:8.9\(100.0\):*:*:*:*:*:*:*cpe:2.3:o:cisco:aironet_1840_firmware:8.9\(100.0\):*:*:*:*:*:*:*cpe:2.3:o:cisco:aironet_1850_firmware:8.9\(100.0\):*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Aironet Access Point Software | affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |