CVE-2020-3390

Summary

CVE-2020-3390 is a denial-of-service vulnerability impacting the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. An unauthenticated attacker in close proximity to an affected device can exploit this issue by sending a maliciously crafted 802.1x packet during the wireless authentication setup phase. The vulnerability stems from insufficient input validation of SNMP trap data related to wireless client connections. Successful exploitation allows the attacker to trigger an unexpected device reload, resulting in a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.