CVE-2019-1920: high-severity vulnerability in Cisco Aironet Access Point Software
Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.4epss 0.8%
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected products
Cisco · Cisco Aironet Access Point SoftwareRelated CVEs — Cisco Aironet Access Point Software
In the same product, most dangerous first.
CVE-2019-15260CRITICALCisco Aironet Access Points Unauthorized Access VulnerabilityEPSS 3.0%CVE-2021-1437HIGHCisco Aironet Access Points FlexConnect Upgrade Information Disclosure VulnerabilityEPSS 1.5%CVE-2020-3262HIGHCisco Wireless LAN Controller CAPWAP Denial of Service VulnerabilityEPSS 1.5%CVE-2020-3560HIGHCisco Aironet Access Points UDP Flooding Denial of Service VulnerabilityEPSS 1.4%CVE-2020-3559MEDIUMCisco Aironet Access Point Authentication Flood Denial of Service VulnerabilityEPSS 1.4%CVE-2022-20622HIGHCisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service VulnerabilityEPSS 1.4%