Cisco Aironet 1840 Firmware vulnerabilities

3 CVEs affecting Cisco Aironet 1840 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-20728, published 2022-09-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3261, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an…
CVE-2020-3260, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability…
CVE-2022-20728, published 2022-09-30. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within…