CVE-2019-1920
High
Description
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
SeverityHigh
CVSS7.4
Exploit probability—
Product
Cisco Access Points
PublishedJul 17, 2019
First seenJul 17, 2019
Weakness typeCWE-20Improper input validation
How to fix
Update
- cisco access_points8.2.170.0, 8.3.150.0, 8.5.131.0, 8.8.100.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco access_points | v < 8.2.170.0, 8.3 ≤ v < 8.3.150.0, 8.4 ≤ v < 8.5.131.0, 8.6 ≤ v < 8.8.100.0 | 8.2.170.0, 8.3.150.0, 8.5.131.0, 8.8.100.0 |
| cisco aironet_3700e_firmware | 15.3\(3\)jc14, 15.3\(3\)jd6 | — |
| cisco aironet_3700i_firmware | 15.3\(3\)jc14, 15.3\(3\)jd6 | — |
| cisco aironet_3700p_firmware | 15.3\(3\)jc14, 15.3\(3\)jd6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.