Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws

🗓️ 17 Oct 2019 14:35:03Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 204 Views

Cisco Aironet Access Points critical flaw

Reporter	Title	Published	Views	Family All 93
ATTACKERKB	CVE-2020-4711	14 Sep 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-4703	14 Sep 202000:00	–	attackerkb
BDU FSTEC	The vulnerability in the implementation of the CAPWAP request analysis procedure for Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, 3800, and 4800 series, as well as Cisco Catalyst network devices, allows a attacker to cause service interruptions.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VPN packet processing function in the implementation of the Point-to-Point Tunneling Protocol of Cisco Aironet Access Points of models 1560, 2800, 3800, and 4800 allows a hacker to cause a service failure.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business series 250, 350, 550X allows a hacker to alter the device’s configuration or trigger a service failure.	29 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, and 4800 lies in their lack of control over access to certain URLs. This allows attackers to gain unauthorized access to protected information, compromise data integrity, or cause service failures.	14 Nov 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Secure Shell (SSH) protocol in Cisco Wireless LAN Controller (WLC), a microprogramming-based controller for wireless access, allows a hacker to induce a service failure.	26 Nov 201900:00	–	bdu_fstec
Circl	CVE-2019-12636	15 Jan 202415:41	–	circl
Circl	CVE-2019-15260	17 Oct 201914:38	–	circl
Circl	CVE-2019-15261	16 Jan 202408:31	–	circl

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-unauth-access
threatpost	www.threatpost.com/newsletter-sign/
cisco	www.cisco.com/web/techdoc/wireless/access_points/online_help/eag/123-02.JA/1400BR/h_ap_services_http.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-pptp-dos
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-capwap-dos
tenable	www.tenable.com/security/research/tra-2019-44
threatpost	www.threatpost.com/cisco-high-severity-bugs-2/148706/
register	www.register.gotowebinar.com/register/9029717654543174147
register	www.register.gotowebinar.com/register/9029717654543174147

17 Oct 2019 14:35Current

1.5Low risk

Vulners AI Score1.5

EPSS0.02994