CVE-2020-3260: falha de alta gravidade em Cisco Aironet Access Point Software
Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 0.5%
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Cisco · Cisco Aironet Access Point SoftwareCVEs relacionadas — Cisco Aironet Access Point Software
No mesmo produto, das mais perigosas para as menos.
CVE-2019-15260CRITICALCisco Aironet Access Points Unauthorized Access VulnerabilityEPSS 3.0%CVE-2021-1437HIGHCisco Aironet Access Points FlexConnect Upgrade Information Disclosure VulnerabilityEPSS 1.5%CVE-2020-3262HIGHCisco Wireless LAN Controller CAPWAP Denial of Service VulnerabilityEPSS 1.5%CVE-2020-3560HIGHCisco Aironet Access Points UDP Flooding Denial of Service VulnerabilityEPSS 1.4%CVE-2020-3559MEDIUMCisco Aironet Access Point Authentication Flood Denial of Service VulnerabilityEPSS 1.4%CVE-2022-20622HIGHCisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service VulnerabilityEPSS 1.4%