Cisco Aironet 1850 Firmware vulnerabilities

4 CVEs affecting Cisco Aironet 1850 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3261, published 2020-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-15261, published 2019-10-16. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the Point-to-Point Tunneling Protocol (PPTP) VPN packet processing functionality in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause an…
CVE-2020-3261, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an…
CVE-2020-3260, published 2020-04-15. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability…
CVE-2019-15264, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation of Cisco Aironet and Catalyst 9100 Access Points (APs) could allow an unauthenticated,…