CVE-2020-3487 : Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit these vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition on the affected device.

Published 2020-09-24 18:15:20

Updated 2020-10-06 13:38:39

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2020-3487

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3487

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.4	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	Cisco Systems, Inc.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-3487

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: ykramarz@cisco.com (Secondary)

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-3487

Products affected by CVE-2020-3487

Cisco » Ios Xe » Version: N/A
cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 9115 Ap » Version: N/A
When used together with: Cisco » Catalyst 9117 Ap » Version: N/A
When used together with: Cisco » Catalyst 9120 Ap » Version: N/A
When used together with: Cisco » Catalyst 9130 Ap » Version: N/A
When used together with: Cisco » Catalyst 9800-40 » Version: N/A
When used together with: Cisco » Catalyst 9800-80 » Version: N/A
When used together with: Cisco » Catalyst 9800-cl » Version: N/A
When used together with: Cisco » Catalyst 9800-l » Version: N/A
When used together with: Cisco » Catalyst 9800 Embedded Wireless Controller » Version: N/A

Vulnerability Details : CVE-2020-3487

Exploit prediction scoring system (EPSS) score for CVE-2020-3487

CVSS scores for CVE-2020-3487

CWE ids for CVE-2020-3487

References for CVE-2020-3487

Products affected by CVE-2020-3487