Cisco Aironet 1540 Firmware vulnerabilities

3 CVEs affecting Cisco Aironet 1540 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15265, published 2019-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-15260, published 2019-10-16. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The…
CVE-2019-15264, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated,…
CVE-2019-15265, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an AP port to go into…