Aironet Access Point Software
Vendor:
First CVE: Mar 5, 2013 · Active for 13 years
28
Total CVEs
More Total CVEs than 96% of tracked products
3.1
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Aironet Access Point Software over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 5, 2013
13 years ago
Most Recent CVE
Mar 23, 2023
1,223 days ago
CVE Severity & Scoring
Aironet Access Point Software28 CVEs
43%
54%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local6 (21.4%)
Network8 (28.6%)
Unknown3 (10.7%)
Physical0 (0.0%)
Adjacent Network11 (39.3%)
Attack Complexity
Low25 (89.3%)
High0 (0.0%)
Unknown3 (10.7%)
User Interaction
None25 (89.3%)
Unknown3 (10.7%)
Required0 (0.0%)
Privileges Required
Low4 (14.3%)
High3 (10.7%)
None18 (64.3%)
Unknown3 (10.7%)
Top CVEs
Signals from CVEs in this product scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-3831CRITICAL A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker coul | Mar 15, 2017 | 9.8 | 31 | NO | NO |
CVE-2018-0234HIGH A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points could allow an unauthenti | May 2, 2018 | 8.6 | 28 | NO | NO |
CVE-2020-3559HIGH A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to impro | Sep 24, 2020 | 8.6 | 27 | NO | NO |
CVE-2022-20622HIGH A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to ca | Apr 15, 2022 | 7.5 | 24 | NO | NO |
CVE-2021-34740HIGH A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload o | Sep 23, 2021 | 7.4 | 24 | NO | NO |
CVE-2021-1437HIGH A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information | Mar 24, 2021 | 7.5 | 24 | NO | NO |
CVE-2020-3552HIGH A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) c | Sep 24, 2020 | 7.4 | 24 | NO | NO |
CVE-2016-6362HIGH Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI | Aug 22, 2016 | 7.8 | 24 | NO | NO |
CVE-2016-1418HIGH Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command pa | Jun 8, 2016 | 7.8 | 24 | NO | NO |
CVE-2021-1439HIGH A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of se | Mar 24, 2021 | 7.4 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (28 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (28 CVEs).
Media Mentions
Signals from CVEs in this product scope (28 CVEs).
Top CNAs Publishing CVEs For Aironet Access Point Software
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.8\(125.0\) | 1 | 8.6 | 1.4% | 0 | 0 |
| 8.7\(1.3\) | 1 | 4.1 | 0.5% | 0 | 0 |
| 8.5\(154.27\) | 1 | 8.6 | 1.4% | 0 | 0 |
| 8.5\(151.0\) | 1 | 8.6 | 1.4% | 0 | 0 |
| 8.5\(107.52\) | 1 | 4.7 | 0.9% | 0 | 0 |
| 8.5\(105.0\) | 1 | 8.6 | 3.9% | 0 | 0 |
| 8.5\(103.0\) | 1 | 8.6 | 3.9% | 0 | 0 |
| 8.4\(1.82\) | 1 | 4.3 | 0.5% | 0 | 0 |
| 8.4\(100.0\) | 2 | 6.3 | 2.2% | 0 | 0 |
| 8.3\(104.105\) | 1 | 4.7 | 0.9% | 0 | 0 |
| 8.3.0 | 3 | 6.9 | 0.9% | 0 | 0 |
| 8.2\(161.0\) | 1 | 4.3 | 0.6% | 0 | 0 |
| 8.2\(160.0\) | 1 | 4.1 | 0.5% | 0 | 0 |
| 8.2\(130.0\) | 1 | 4.3 | 0.4% | 0 | 0 |
| 8.2\(121.12\) | 1 | 4.3 | 0.5% | 0 | 0 |
| 8.2\(102.43\) | 4 | 7.2 | 0.8% | 0 | 0 |
| 8.2\(100.0\) | 3 | 6.9 | 0.9% | 0 | 0 |
| 8.2_\(100.0\) | 1 | 7.8 | 0.4% | 0 | 0 |
| 8.1\(15.14\) | 5 | 7.6 | 1.9% | 0 | 0 |
| 8.1\(131.0\) | 5 | 7.7 | 2.0% | 0 | 0 |