[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCs_w1TucvXSsv0cw6kq2jSRWujqoE4cCVz0tnslC_DQ":3,"g5a-ex:cisco\u002Faironet_4800@*":102,"g5a-family:cisco\u002Faironet_4800":104},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":79,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","aironet_4800",0,19,"2023-03-23",[],"Aironet 4800 by Cisco is a technology product and 19 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,38,43,49,56,62,69,74],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2022-20695","A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to bypass authentication controls and log in to the device through the management interface This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and log in to the device as an administrator. The attacker could obtain privileges that are the same level as an administrative user but it depends on the crafted credentials. Note: This vulnerability exists because of a non-default device configuration that must be present for it to be exploitable. For details about the vulnerable configuration, see the Vulnerable Products section of this advisory.","2022-04-15",10,"v3.1","Critical",false,0.1977,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2020-26139","An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.","2021-05-11",5.3,"Medium",0.06487,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":37},"CVE-2019-15260","A vulnerability in Cisco Aironet Access Points (APs) Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could exploit this vulnerability by requesting specific URLs from an affected AP. An exploit could allow the attacker to gain access to the device with elevated privileges. While the attacker would not be granted access to all possible configuration options, it could allow the attacker to view sensitive information and replace some options with values of their choosing, including wireless network configuration. It would also allow the attacker to disable the AP, creating a denial of service (DoS) condition for clients associated with the AP.","2019-10-16",9.8,0.02994,{"cveId":39,"description":40,"publishedDate":28,"cvssScore":41,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":42},"CVE-2020-26140","An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",6.5,0.02923,{"cveId":44,"description":45,"publishedDate":28,"cvssScore":46,"cvssVersion":21,"severity":47,"isKev":23,"epssScore":48},"CVE-2020-24587","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",2.6,"Low",0.02592,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":21,"severity":54,"isKev":23,"epssScore":55},"CVE-2021-1437","A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol (TFTP) configuration. An attacker could exploit this vulnerability by sending a specific TFTP request to an affected device. A successful exploit could allow the attacker to download any file from the filesystem of the affected access point (AP).","2021-03-24",7.5,"High",0.01548,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":21,"severity":54,"isKev":23,"epssScore":61},"CVE-2020-3560","A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.","2020-09-24",8.6,0.01415,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":30,"isKev":23,"epssScore":68},"CVE-2019-1826","A vulnerability in the quality of service (QoS) feature of Cisco Aironet Series Access Points (APs) could allow an authenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation on QoS fields within Wi-Fi frames by the affected device. An attacker could exploit this vulnerability by sending malformed Wi-Fi frames to an affected device. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a DoS condition.","2019-04-18",5.7,"v3.0",0.00559,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":41,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":73},"CVE-2020-3261","A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user with an active session on an affected device to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions, including modifying the configuration, with the privilege level of the user.","2020-04-15",0.005,{"cveId":75,"description":76,"publishedDate":59,"cvssScore":77,"cvssVersion":21,"severity":54,"isKev":23,"epssScore":78},"CVE-2020-3552","A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting as a wired client to the Ethernet interface of an affected device and sending a series of specific packets within a short time frame. A successful exploit could allow the attacker to cause a NULL pointer access that results in a reload of the affected device.",7.4,0.00486,[],{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Aironet 4800 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Aironet 4800 by Cisco with 19 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Aironet 4800 vulnerabilities, Aironet 4800 security, Aironet 4800 CVE, Cisco Aironet 4800, Aironet 4800 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","Aironet 4800","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Faironet_4800",{"@type":90,"name":91,"url":92},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Aironet 4800 Security Vulnerabilities","Security vulnerabilities affecting Aironet 4800 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":100,"apiVersion":101},"2026-10-18T22:18:26.105Z","3.0",{"rows":103,"total":9,"capped":23,"failed":9},[],[105],{"product":106,"cves":107},"aironet_4800_firmware",8]