1. Home
  2. CVE Database
  3. CVE-2020-3560
HIGH · 8.6

CVE-2020-3560

A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper reso...

Vulnerability Description

A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoWireless Lan Controller>= 8.9, < 8.10.112.0
CiscoWireless Lan Controller Software< 8.5.161.0
Cisco1111-4Pwe-
Cisco1111-8Plteeawb-
Cisco1111-8Pwb-
Cisco1113-8Plteeawe-
Cisco1113-8Pmwe-
Cisco1113-8Pwe-
Cisco1116-4Plteeawe-
Cisco1116-4Pwe-
Cisco1117-4Plteeawe-
Cisco1117-4Pmlteeawe-
Cisco1117-4Pmwe-
Cisco1117-4Pwe-
CiscoAironet 1542D-
CiscoAironet 1542I-
CiscoAironet 1562D-
CiscoAironet 1562E-
CiscoAironet 1562I-
CiscoAironet 1815-

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2020-3560?

CVE-2020-3560 is a vulnerability with a CVSS score of 8.6 (HIGH). A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper reso...

How severe is CVE-2020-3560?

CVE-2020-3560 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3560?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Wireless Lan Controller, Cisco Wireless Lan Controller Software, Cisco 1111-4Pwe, Cisco 1111-8Plteeawb, Cisco 1111-8Pwb.