CVE-2019-1920: Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-1920?
CVE-2019-1920 is a vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software that could allow a denial of service (DoS) attack.
How does CVE-2019-1920 affect Cisco Aironet 3700e Firmware?
Cisco Aironet 3700e Firmware versions 15.3(3)jc14 and 15.3(3)jd6 are affected by CVE-2019-1920.
How does CVE-2019-1920 affect Cisco Aironet 3700i Firmware?
Cisco Aironet 3700i Firmware versions 15.3(3)jc14 and 15.3(3)jd6 are affected by CVE-2019-1920.
How does CVE-2019-1920 affect Cisco Aironet 3700p Firmware?
Cisco Aironet 3700p Firmware versions 15.3(3)jc14 and 15.3(3)jd6 are affected by CVE-2019-1920.
How severe is CVE-2019-1920?
CVE-2019-1920 has a severity rating of 7.4 (high).
How can I fix CVE-2019-1920?
To mitigate the vulnerability, Cisco recommends upgrading to a fixed software release or disabling the 802.11r feature on affected devices.