7.4
CVE-2019-1920
- EPSS 0.92%
- Veröffentlicht 17.07.2019 21:15:12
- Zuletzt bearbeitet 21.11.2024 04:37:41
- Quelle psirt@cisco.com
- Teams Watchlist Login
- Unerledigt Login
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Aironet 3700e Firmware Version15.3(3)jc14
Cisco ≫ Aironet 3700e Firmware Version15.3(3)jd6
Cisco ≫ Aironet 3700i Firmware Version15.3(3)jc14
Cisco ≫ Aironet 3700i Firmware Version15.3(3)jd6
Cisco ≫ Aironet 3700p Firmware Version15.3(3)jc14
Cisco ≫ Aironet 3700p Firmware Version15.3(3)jd6
Cisco ≫ Access Points Version < 8.2.170.0
Cisco ≫ Access Points Version >= 8.3 < 8.3.150.0
Cisco ≫ Access Points Version >= 8.4 < 8.5.131.0
Cisco ≫ Access Points Version >= 8.6 < 8.8.100.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.92% | 0.751 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.4 | 2.8 | 4 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
| nvd@nist.gov | 6.1 | 6.5 | 6.9 |
AV:A/AC:L/Au:N/C:N/I:N/A:C
|
| psirt@cisco.com | 7.4 | 2.8 | 4 |
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.