CVE-2020-3552
7.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 4.0
Source: NVD
Description
A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device.
Affected (4)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 8.6 to 8.10.105.0 |
| Running on/with | Platform Versions |
|---|---|
Cisco Aironet 1542d | All versions |
Cisco Aironet 1542i | All versions |
Cisco Aironet 1562d | All versions |
Cisco Aironet 1562e | All versions |
Cisco Aironet 1562i | All versions |
Cisco Aironet 1810 | All versions |
Cisco Aironet 1815 | All versions |
Cisco Aironet 1830e | All versions |
Cisco Aironet 1830i | All versions |
Cisco Aironet 1840 | All versions |
Cisco Aironet 2800e | All versions |
Cisco Aironet 2800i | All versions |
Cisco Aironet 3800e | All versions |
Cisco Aironet 3800i | All versions |
Cisco Aironet 3800p | All versions |
Cisco Aironet 4800 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.0 to 10.1.1.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16.12.4a |
| Running on/with | Platform Versions |
|---|---|
Cisco Catalyst 9800 40 | All versions |
Cisco Catalyst 9800 80 | All versions |
Cisco Catalyst 9800 Cl | All versions |
Cisco Catalyst 9800 L | All versions |
Cisco Catalyst 9800 L C | All versions |
Cisco Catalyst 9800 L F | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.10(1.255) |
| Running on/with | Platform Versions |
|---|---|
Cisco Aironet 1850e | All versions |
Cisco Aironet 1850i | All versions |
Related CWEs
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.