Cisco Aironet 4800 Firmware vulnerabilities

CVE-2022-20728 [MEDIUM] CWE-284 CVE-2022-20728: A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an u A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to a logic error on the AP that forwards packets that are destined to a wireless client if they

CVE-2020-3261 [MEDIUM] CWE-352 CVE-2020-3261: A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could e

CVE-2019-15260 [CRITICAL] CWE-284 CVE-2019-15260: A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by requesting specific