CVE-2020-3559
High
Description
A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending authentication requests from multiple clients to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Cisco Access Points
PublishedSep 24, 2020
First seenSep 24, 2020
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- cisco access_points16.12.4a or later
- cisco wireless_lan_controller8.10.112.0 or later
- cisco business_access_points10.1.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco access_points | v < 16.12.4a | 16.12.4a |
| cisco wireless_lan_controller | 8.9 ≤ v < 8.10.112.0 | 8.10.112.0 |
| cisco business_access_points | 10.0 ≤ v < 10.1.1.0 | 10.1.1.0 |
| cisco aironet_access_point_software | 8.5\(151.0\), 17.2.0.26 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.