CVE-2020-3260 — MEDIUM (6.5)

Vulnerability Description

A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Cisco	Aironet 1542I Firmware	8.9\(100.0\)
Cisco	Aironet 1542I	-
Cisco	Aironet 1542D Firmware	8.9\(100.0\)
Cisco	Aironet 1542D	-
Cisco	Aironet 1815 Firmware	8.9\(100.0\)
Cisco	Aironet 1815	-
Cisco	Aironet 1830 Firmware	8.9\(100.0\)
Cisco	Aironet 1830	-
Cisco	Aironet 1840 Firmware	8.9\(100.0\)
Cisco	Aironet 1840	-
Cisco	Aironet 1850 Firmware	8.9\(100.0\)
Cisco	Aironet 1850	-

Related Weaknesses (CWE)

CWE-400 CWE-399

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aVendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aVendor Advisory

FAQ

What is CVE-2020-3260?

CVE-2020-3260 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability i...

How severe is CVE-2020-3260?

CVE-2020-3260 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3260?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Aironet 1542I Firmware, Cisco Aironet 1542I, Cisco Aironet 1542D Firmware, Cisco Aironet 1542D, Cisco Aironet 1815 Firmware.