Medium severity · published Apr 15, 2020
CVE-2020-3260
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A1
Aironet 1542d Firmware · Cisco
8.9(100.0) · source: NVD
A1
Aironet 1542i Firmware · Cisco
8.9(100.0) · source: NVD
A1
Aironet 1815 Firmware · Cisco
8.9(100.0) · source: NVD
A1
Aironet 1830 Firmware · Cisco
8.9(100.0) · source: NVD
A1
Aironet 1840 Firmware · Cisco
8.9(100.0) · source: NVD
A1
Aironet 1850 Firmware · Cisco
8.9(100.0) · source: NVD
Affected product
A1
Aironet 1542d Firmware
Cisco
More from Aironet 1542d Firmware
7.8
CVE-2021-1419
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and…
6.5
CVE-2020-26140
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H
6.5
CVE-2020-3261
A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…
5.3
CVE-2020-26139
An issue was discovered in the kernel in NetBSD 7.1
4.7
CVE-2022-20728
Cisco Access Points VLAN Bypass from Native VLAN Vulnerability