CVE-2020-3559

cisco wireless lan controller, cisco business access points, cisco access points +1 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-3559

Katalog CVE

CVSS 8.6 · High EPSS 1,4%

Kerentanan Uncontrolled Resource Consumption pada cisco wireless lan controller, cisco business access points +2 lainnya. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending authentication requests from multiple clients to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.

Rincian

Terbit di NVD
24 September 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-400: Uncontrolled Resource Consumption
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 71,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco wireless lan controller Versi 8.9 hingga sebelum 8.10.112.0
cisco business access points Versi 10.0 hingga sebelum 10.1.1.0
cisco access points Semua versi sebelum 16.12.4a
cisco aironet access point software Versi 8.5(151.0)
cisco aironet access point software Versi 17.2.0.26

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.