PT-2020-2422 · Cisco · Cisco Catalyst 9100+3
Published
2020-04-15
·
Updated
2020-04-29
·
CVE-2020-3261
CVSS v2.0
8.8
High
| Vector | AV:N/AC:M/Au:N/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Mobility Express Software (affected versions not specified)
Cisco Aironet Access Points (AP) series 1540, 1560, 1800, 2800, 3800, 4800
Cisco Catalyst 9100
Cisco 6300
Description
A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The issue is due to insufficient CSRF protections for the web-based management interface. An attacker could exploit this by persuading a user with an active session to follow a malicious link, potentially allowing the attacker to perform arbitrary actions, including modifying the configuration, with the privilege level of the user.
Recommendations
For Cisco Mobility Express Software, consider disabling access to the web-based management interface until a fix is available.
For Cisco Aironet Access Points (AP) series 1540, 1560, 1800, 2800, 3800, 4800, restrict access to the management interface to minimize the risk of exploitation.
For Cisco Catalyst 9100 and Cisco 6300, avoid using the web-based management interface until the issue is resolved.
As a temporary workaround, consider implementing additional security measures to prevent CSRF attacks, such as validating user requests and ensuring proper session management.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco 6300
Cisco Aironet Access Points
Cisco Catalyst 9100
Cisco Mobility Express