cisco-sa-aironet-dos-h3DCuLXw

Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability

Advisory ansehen veröffentlicht 2020-09-24

A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending authentication requests from multiple clients to an affected device. A successful exploit could allow the attacker to cause the affected device to reload. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-3559US	high8.6	1.40% (72nd)	—	2020-09-24
A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to impro…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerabilityself
Cisco Security Vulnerability Policyexternal
considering software upgradesexternal
Cisco Security Advisories pageexternal

Behebungen (3)

BehobenCisco Aironet Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Aironet Access Point Software (IOS XE Controller)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Business Wireless Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan