csirt@kutim:~/threat-intel/cve/CVE-2020-3560

Katalog CVE

CVSS 8.6 · High EPSS 1,4%

Kerentanan Uncontrolled Resource Consumption pada cisco wireless lan controller, cisco wireless lan controller software +3 lainnya. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.

Rincian

Terbit di NVD
24 September 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-400: Uncontrolled Resource Consumption
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 72,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco wireless lan controller Versi 8.9 hingga sebelum 8.10.112.0
cisco wireless lan controller software Semua versi sebelum 8.5.161.0
cisco wireless lan controller software Versi 8.6 hingga sebelum 8.8.130.0
cisco business access points Versi 10.0 hingga sebelum 10.1.1.0
cisco access points Semua versi sebelum 16.12.4a
cisco aironet access point software Versi 8.5(154.27)
cisco aironet access point software Versi 8.8(125.0)
cisco aironet access point software Versi 8.10(105.0)
cisco aironet access point software Versi 8.10(105.4)
cisco aironet access point software Versi 17.1.2.6
cisco aironet access point software Versi 17.1.2.9
cisco aironet access point software Versi 17.2.0.37

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.