Resource management error in Cisco Aironet 1540 Series Access Points and Cisco Aironet 1800 Series Access Points - CVE-2020-3260
Published: April 16, 2020
Vulnerability identifier: #VU26982
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3260
CWE-ID: CWE-399
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the improper processing of client packets that are sent to an affected access point (AP). A remote attacker on the local network can send a large number of sustained client packets and cause a denial of service condition on the target system.
Affected software
Cisco Aironet 1540 Series Access Points
Cisco Aironet 1800 Series Access Points
Cisco Aironet 1800 Series Access Points
How to mitigate CVE-2020-3260
Install updates from vendor's website.
Cisco Aironet 1540 Series Access Points - addressed in versions 8.5.160.0, 8.5.161.0, 8.8.130.0, 8.9.111.0, 8.10.121.0
Cisco Aironet 1800 Series Access Points - addressed in versions 8.5.160.0, 8.5.161.0, 8.8.130.0, 8.9.111.0, 8.10.121.0
Cisco Aironet 1800 Series Access Points - addressed in versions 8.5.160.0, 8.5.161.0, 8.8.130.0, 8.9.111.0, 8.10.121.0