PT-2020-2431 · Cisco · Cisco Aironet Access Points

Published 2020-04-15 · Updated 2020-04-29 · CVE-2020-3260

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Aironet Access Points versions 1540, 1800

Description The issue is related to the improper processing of client packets sent to an affected access point (AP), which could allow a remote attacker to cause a denial of service (DoS) condition by sending specially crafted packets. An attacker could exploit this by sending a large number of sustained client packets to the affected AP, potentially causing it to crash and resulting in a DoS condition.

Recommendations For Cisco Aironet Access Points versions 1540, 1800, consider restricting access to the affected AP to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid overloading the affected AP with client packets to prevent a potential crash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-399

CWE-400

Related Identifiers

BDU:2020-02433

CVE-2020-3260

Affected Products

Cisco Aironet Access Points

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-dos-5ZLs6ESz · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3260 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3260 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02433 · Security Note