[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvhp7TJVVg7VuaJjWC3jCmoZh1Kkj6AEVblAHU1aaeXc":3,"g5a-ex:cisco\u002Fcatalyst_9130@*":95,"g5a-family:cisco\u002Fcatalyst_9130":97},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":72,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","catalyst_9130",0,16,"2024-03-27",[],"Catalyst 9130 by Cisco is a technology product and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,31,36,41,48,53,59,64,68],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2020-26139","An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.","2021-05-11",5.3,"v3.1","Medium",false,0.06487,{"cveId":26,"description":27,"publishedDate":19,"cvssScore":28,"cvssVersion":21,"severity":29,"isKev":23,"epssScore":30},"CVE-2020-24588","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.",3.5,"Low",0.03611,{"cveId":32,"description":33,"publishedDate":19,"cvssScore":34,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":35},"CVE-2020-26140","An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.",6.5,0.02923,{"cveId":37,"description":38,"publishedDate":19,"cvssScore":39,"cvssVersion":21,"severity":29,"isKev":23,"epssScore":40},"CVE-2020-24587","The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.",2.6,0.02592,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":47},"CVE-2020-3560","A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.","2020-09-24",8.6,"High",0.01415,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":52},"CVE-2021-1615","A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This vulnerability is due to insufficient buffer allocation. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to exhaust available resources and cause a DoS condition on an affected AP, as well as a DoS condition for client traffic traversing the AP.","2021-09-23",0.01328,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":58},"CVE-2022-20919","A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.","2022-09-30",7.5,0.01207,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":63},"CVE-2023-20176","A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a temporary disruption of service.\r\n\r This vulnerability is due to overuse of AP resources. An attacker could exploit this vulnerability by connecting to an AP on an affected device as a wireless client and sending a high rate of traffic over an extended period of time. A successful exploit could allow the attacker to cause the Datagram TLS (DTLS) session to tear down and reset, causing a denial of service (DoS) condition.","2023-09-27",0.00866,{"cveId":65,"description":66,"publishedDate":11,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":23,"epssScore":67},"CVE-2024-20259","A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.\r\n\r Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.",0.00816,{"cveId":69,"description":70,"publishedDate":44,"cvssScore":34,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":71},"CVE-2020-3486","Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit these vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition on the affected device.",0.00571,[],{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Catalyst 9130 by Cisco - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Catalyst 9130 by Cisco with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Catalyst 9130 vulnerabilities, Catalyst 9130 security, Catalyst 9130 CVE, Cisco Catalyst 9130, Catalyst 9130 threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Catalyst 9130","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fcatalyst_9130",{"@type":83,"name":84,"url":85},"Organization","Cisco","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Catalyst 9130 Security Vulnerabilities","Security vulnerabilities affecting Catalyst 9130 by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":93,"apiVersion":94},"2026-10-19T06:22:47.333Z","3.0",{"rows":96,"total":9,"capped":23,"failed":9},[],[98,101,104],{"product":99,"cves":100},"catalyst_9130_ap",11,{"product":102,"cves":103},"catalyst_9130_firmware",6,{"product":105,"cves":106},"catalyst_9130_ap_firmware",4]