Resource exhaustion in Cisco Systems, Inc products - CVE-2020-3560

Vulnerability identifier: #VU47140

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-3560

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of clients that are trying to connect to the AP. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Cisco Aironet 1560 Series Access Points
Cisco Catalyst 9800 Wireless Controller
Integrated Access Point on 1100 Integrated Services Routers
Cisco ESW6300 Series Access Points
Cisco Catalyst IW 6300
Cisco Catalyst 9100
Cisco Small Business 200 Series Smart Switches
Cisco Small Business 100 Series Wireless Access Points
Cisco 4800 Aironet Access Points
Cisco Aironet 3800 Series Access Points
Cisco Aironet 2800 Series Access Points
Cisco Aironet 1800 Series Access Points
Cisco Aironet 1540 Series Access Points
Cisco Business Access Points
Cisco Wireless LAN Controller

Install updates from vendor's website.

Cisco Catalyst 9800 Wireless Controller - update to 16.12.4a
Cisco Wireless LAN Controller - addressed in versions 8.5.160.0, 8.8.130.0, 8.10.112.0
Cisco Business Access Points - update to 10.1.1.0

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-dos-VHr2zG9y

• Multiple vulnerabilities in Cisco Aironet Access Points