Cisco Aironet 2800 Firmware vulnerabilities

CVE-2019-15260 [CRITICAL] CWE-284 CVE-2019-15260: A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by requesting specific

CVE-2019-15265 [MEDIUM] CWE-20 CVE-2019-15265: A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Ac A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless clients are forwarded incorrectly. An attacker could expl