cisco-sa-aironet-dos-h3DCuLXw

csafUScisco_csaf

Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability

view advisory published 2020-09-24

A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending authentication requests from multiple clients to an affected device. A successful exploit could allow the attacker to cause the affected device to reload. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-3559UShigh8.6—
A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to impro…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • FixedCisco Aironet Access Point Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Aironet Access Point Software (IOS XE Controller)

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Business Wireless Access Point Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan