CVE Feed

    Dashboard / CVE / CVE-2019-15265

    CVE-2019-15265

    A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless clients are forwarded incorrectly. An attacker could exploit this vulnerability on the wireless network by sending a steady stream of crafted BPDU frames. A successful exploit could allow the attacker to cause a limited denial of service (DoS) attack because an AP port could go offline.

    Published:Oct 16, 2019
    Last Modified:Nov 21, 2024
    EPS:Oct 16, 2019
    EPSS Score:0.00237
    CVSS Score:6.5

    Affected Products

    Vendor
    Cisco
    Product
    Aironet 1540
    Vendor
    Cisco
    Product
    Aironet 1540 Firmware
    Vendor
    Cisco
    Product
    Aironet 1560
    Vendor
    Cisco
    Product
    Aironet 1560 Firmware
    Vendor
    Cisco
    Product
    Aironet 1800
    Vendor
    Cisco
    Product
    Aironet 1800 Firmware
    Vendor
    Cisco
    Product
    Aironet 2800
    Vendor
    Cisco
    Product
    Aironet 2800 Firmware
    Vendor
    Cisco
    Product
    Aironet 3800
    Vendor
    Cisco
    Product
    Aironet 3800 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High