CVE-2020-3552

Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

HIGH

7.4

CVSS Score

Published: September 24, 2020 at 05:51 PM UTC

Updated: June 17, 2026 at 03:18 AM UTC

29 products affected across 1 vendorWireless LAN ControllerAironet Access PointAccess Points

Using Cisco Aironet Access Point Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Aironet Access Point Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.4

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Access Points · Cisco

95%

v < 16.12.4a

Affected range stops below 16.12.4a, so it looks safe — our inference, not a vendor statement

cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-9800-l-c (environment) · cisco-catalyst-9800-l-f (environment)

Aironet Access Point · Cisco

95%

8.10(1.255)

cisco-aironet-1850e (environment) · cisco-aironet-1850i (environment)

Business Access Points · Cisco

95%

10.0 ≤ v < 10.1.1.0

Affected range stops below 10.1.1.0, so it looks safe — our inference, not a vendor statement

Wireless LAN Controller · Cisco

95%

8.6 ≤ v < 8.10.105.0

Affected range stops below 8.10.105.0, so it looks safe — our inference, not a vendor statement

cisco-aironet-1542d (environment) · cisco-aironet-1542i (environment) · cisco-aironet-1562d (environment) · cisco-aironet-1562e (environment) · cisco-aironet-1562i (environment) · cisco-aironet-1810 (environment) · cisco-aironet-1815 (environment) · cisco-aironet-1830e (environment) · cisco-aironet-1830i (environment) · cisco-aironet-1840 (environment) · cisco-aironet-1850e (environment) · cisco-aironet-1850i (environment) · cisco-aironet-2800e (environment) · cisco-aironet-2800i (environment) · cisco-aironet-3800e (environment) · cisco-aironet-3800i (environment) · cisco-aironet-3800p (environment) · cisco-aironet-4800 (environment)

Business Wireless Access Point · Cisco

80%

10.0 ≤ v < 10.1.1.0

Affected range stops below 10.1.1.0, so it looks safe — our inference, not a vendor statement

Aironet 1542D · Ciscodevice

80%

All versions

Aironet 1542I · Ciscodevice

80%

All versions

Aironet 1562D · Ciscodevice

80%