Cisco Aironet 1850 Firmware vulnerabilities

4 known vulnerabilities affecting cisco/aironet_1850_firmware.

Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM3

Vulnerabilities

Page 1 of 1
CVE-2020-3261MEDIUMCVSS 6.5≥ 8.0, < 8.8.130.0v8.10\(1.255\)2020-04-15
CVE-2020-3261 [MEDIUM] CWE-352 CVE-2020-3261: A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could e
nvd
CVE-2020-3260MEDIUMCVSS 6.5v8.9\(100.0\)2020-04-15
CVE-2020-3260 [MEDIUM] CWE-399 CVE-2020-3260: A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjac A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point (AP). An attacker could exploit this vulnerability by sendin
nvd
CVE-2019-15261HIGHCVSS 8.6≥ 8.4, < 8.5.151.0≥ 8.8, < 8.8.125.0+1 more2019-10-16
CVE-2019-15261 [HIGH] CWE-20 CVE-2019-15261: A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Generic Routing Encapsulat
nvd
CVE-2019-15264MEDIUMCVSS 6.5v8.9\(1.249\)v8.9\(1.255\)+8 more2019-10-16
CVE-2019-15264 [MEDIUM] CWE-400 CVE-2019-15264: A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implemen A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to improper
nvd