7.4

CVE-2020-3260

A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sending a large number of sustained client packets to the affected AP. A successful exploit could allow the attacker to cause the affected AP to crash, resulting in a DoS condition.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Aironet 1542i Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1542i Version-
Cisco ≫ Aironet 1542d Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1542d Version-
Cisco ≫ Aironet 1815 Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1815 Version-
Cisco ≫ Aironet 1830 Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1830 Version-
Cisco ≫ Aironet 1840 Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1840 Version-
Cisco ≫ Aironet 1850 Firmware Version8.9(100.0)
   Cisco ≫ Aironet 1850 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.31% 0.534
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
psirt@cisco.com 7.4 2.8 4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.