CVE-2020-3560
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 4.0
Source: NVD
Description
A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.
Affected (12)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 8.9 to 8.10.112.0 | |
| Before 8.5.161.0 |
| Running on/with | Platform Versions |
|---|---|
Cisco 1111 4pwe | All versions |
Cisco 1111 8plteeawb | All versions |
Cisco 1111 8pwb | All versions |
Cisco 1113 8plteeawe | All versions |
Cisco 1113 8pmwe | All versions |
Cisco 1113 8pwe | All versions |
Cisco 1116 4plteeawe | All versions |
Cisco 1116 4pwe | All versions |
Cisco 1117 4plteeawe | All versions |
Cisco 1117 4pmlteeawe | All versions |
Cisco 1117 4pmwe | All versions |
Cisco 1117 4pwe | All versions |
Cisco Aironet 1542d | All versions |
Cisco Aironet 1542i | All versions |
Cisco Aironet 1562d | All versions |
Cisco Aironet 1562e | All versions |
Cisco Aironet 1562i | All versions |
Cisco Aironet 1815 | All versions |
Cisco Aironet 1830e | All versions |
Cisco Aironet 1830i | All versions |
Cisco Aironet 2800e | All versions |
Cisco Aironet 2800i | All versions |
Cisco Aironet 3800e | All versions |
Cisco Aironet 3800i | All versions |
Cisco Aironet 3800p | All versions |
Cisco Aironet 4800 | All versions |
Cisco Business 140ac | All versions |
Cisco Business 145ac | All versions |
Cisco Business 240ac | All versions |
Cisco Catalyst 9105 | All versions |
Cisco Catalyst 9115 | All versions |
Cisco Catalyst 9117 | All versions |
Cisco Catalyst 9120 | All versions |
Cisco Catalyst 9130 | All versions |
Cisco Catalyst Iw6300 | All versions |
Cisco Esw 6300 Con X K9 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.0 to 10.1.1.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16.12.4a |
| Running on/with | Platform Versions |
|---|---|
Cisco Catalyst 9800 40 | All versions |
Cisco Catalyst 9800 80 | All versions |
Cisco Catalyst 9800 Cl | All versions |
Cisco Catalyst 9800 L | All versions |
Cisco Catalyst 9800 L C | All versions |
Cisco Catalyst 9800 L F | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 17.1.2.6 |
| Running on/with | Platform Versions |
|---|---|
Cisco Aironet 1850e | All versions |
Cisco Aironet 1850i | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.