Cisco Cisco Aironet Access Point Software

Name: Cisco Cisco Aironet Access Point Software
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical15high21medium3low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-26139US	medium5.3	6.49% (94th)	—	no fix	2021-05-11	—
CVE-2020-24586US	low3.5	5.76% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26146US	medium5.3	5.62% (93rd)	—	no fix	2021-05-11	—
CVE-2020-26144US	medium6.5	4.91% (92nd)	—	no fix	2021-05-11	—
CVE-2020-24588US	low3.5OT elevated	3.61% (89th)	—	no fix	2021-05-11	—
CVE-2020-26145US	medium6.5	3.52% (89th)	—	no fix	2021-05-11	—
CVE-2019-15260US	critical9.8	2.99% (87th)	—	n/a	2019-10-16	2 versions
CVE-2018-16986US	high8.8	2.85% (87th)	—	no fix	2018-11-06	—
CVE-2020-24587US	low2.6OT elevated	2.59% (85th)	—	no fix	2021-05-11	—
CVE-2021-1437US	high7.5	1.55% (75th)	—	no fix	2021-03-24	2 versions
CVE-2020-3262US	high7.5	1.47% (74th)	—	no fix	2020-04-15	2 versions
CVE-2020-3560US	high8.6	1.42% (73rd)	—	no fix	2020-09-24	2 versions
CVE-2020-3559US	high8.6	1.40% (72nd)	—	no fix	2020-09-24	2 versions
CVE-2022-20622US	high7.5	1.39% (72nd)	—	no fix	2022-04-15	2 versions
CVE-2019-15261US	high8.6	1.37% (72nd)	—	n/a	2019-10-16	2 versions
CVE-2018-0247US	medium4.7	0.91% (60th)	—	no fix	2018-05-02	—
CVE-2023-20176US	high8.6	0.87% (58th)	—	no fix	2023-09-27	2 versions
CVE-2018-0441US	high7.4	0.86% (58th)	—	no fix	2018-10-17	2 versions
CVE-2019-1920US	high7.4	0.80% (56th)	—	8.8.100.0	2019-07-17	2 versions
CVE-2019-1835US	medium4.4	0.77% (55th)	—	no fix	2019-04-18	3 versions
CVE-2021-27854US	medium4.7	0.71% (54th)	—	no fix	2022-09-27	—
CVE-2024-20271US	high8.6	0.63% (50th)	—	no fix	2024-03-27	104 versions
CVE-2019-1834US	medium6.5	0.63% (50th)	—	no fix	2019-04-18	2 versions
CVE-2018-0249US	medium4.3	0.58% (47th)	—	no fix	2018-05-02	—
CVE-2019-1826US	medium5.7	0.56% (46th)	—	no fix	2019-04-18	2 versions
CVE-2020-3552US	high7.4	0.49% (42nd)	—	no fix	2020-09-24	2 versions
CVE-2020-3260US	medium6.5	0.46% (39th)	—	no fix	2020-04-15	2 versions
CVE-2019-15264US	medium6.5	0.46% (39th)	—	n/a	2019-10-16	2 versions
CVE-2018-0250US	medium4.1	0.45% (39th)	—	no fix	2018-05-02	—
CVE-2019-1829US	medium6.7	0.45% (39th)	—	no fix	2019-04-18	2 versions
CVE-2019-1654US	high7.8OT elevated	0.39% (33rd)	—	8.3.150.0	2019-04-17	2 versions
CVE-2021-34740US	high7.4	0.36% (30th)	—	no fix	2021-09-23	2 versions
CVE-2019-15265US	medium6.5	0.32% (25th)	—	n/a	2019-10-16	2 versions
CVE-2023-20112US	medium6.5	0.30% (23rd)	—	no fix	2023-03-23	2 versions
CVE-2024-20354US	high7.4	0.29% (22nd)	—	no fix	2024-03-27	2 versions
CVE-2021-1449US	medium6.7	0.27% (20th)	—	no fix	2021-03-24	2 versions
CVE-2023-20268US	medium4.7	0.26% (18th)	—	no fix	2023-09-27	106 versions
CVE-2023-20056US	medium5.5	0.26% (17th)	—	no fix	2023-03-23	2 versions
CVE-2024-20265US	—	0.25% (16th)	—	no fix	2024-03-27	104 versions
CVE-2021-1423US	medium4.4	0.24% (15th)	—	no fix	2021-03-24	2 versions
CVE-2023-20097US	medium6.7	0.24% (14th)	—	no fix	2023-03-23	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation12 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-284Improper Access Control3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-290Authentication Bypass by Spoofing2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs

sources (2)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)41 CVEs
EUEU Vulnerability Database (ENISA)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan