Summary

• The April 15, 2020, release of the Cisco Aironet AP, Mobility Express, and WLC Software Security Advisory Bundled Publication includes four Cisco Security Advisories that describe four vulnerabilities in Cisco Aironet Access Points (AP), Mobility Express, and Wireless LAN Controller (WLC) Software. Cisco has released software updates that address these vulnerabilities.

  All four vulnerabilities have a Security Impact Rating (SIR) of High. Successful exploitation of the vulnerabilities could allow an attacker to conduct a cross-site request forgery attack or cause a denial of service (DoS) condition on an affected device.

  Two vulnerabilities affect Cisco WLC Software, one vulnerability affects only Cisco Aironet AP Software, and one vulnerability affects only Cisco Mobility Express Software.

Details

• Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-airo-wpa-dos-5ZLs6ESz Cisco Aironet Series Access Points Denial of Service Vulnerability	CVE-2020-3260	High	7.4
  cisco-sa-mob-exp-csrf-b8tFec24 Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability	CVE-2020-3261	High	8.1
  cisco-sa-wlc-gas-dos-8FsE3AWH Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability	CVE-2020-3273	High	8.6
  cisco-sa-wlc-capwap-dos-Y2sD9uEw Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability	CVE-2020-3262	High	8.6

  
  

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A