Cisco Aironet Access Point Software vulnerabilities

29 CVEs affecting Cisco Aironet Access Point Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20418, published 2024-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3831, published 2017-03-15. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full…
CVE-2018-0234, published 2018-05-02. High severity, CVSS 8.6. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points could allow an unauthenticated, remote…
CVE-2024-20418, published 2024-11-06. Critical severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points could allow an unauthenticated,…
CVE-2015-6320, published 2016-01-15. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112.4) allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug…
CVE-2015-6367, published 2015-11-14. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many SSHv2 connections, aka Bug ID CSCux13374.
CVE-2021-1437, published 2021-03-24. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected…
CVE-2020-3560, published 2020-09-24. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper…
CVE-2020-3559, published 2020-09-24. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of…
CVE-2015-6336, published 2016-01-15. High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to obtain access via unspecified…
CVE-2022-20622, published 2022-04-15. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to…

Latest

CVE-2024-20265, published 2024-03-27. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that…
CVE-2023-20097, published 2023-03-23. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to…
CVE-2023-20056, published 2023-03-23. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This…
CVE-2021-34740, published 2021-09-23. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected…
CVE-2021-1423, published 2021-03-24. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This…
CVE-2021-1449, published 2021-03-24. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check…
CVE-2021-1439, published 2021-03-24. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)…