CVE-2020-3206: Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability
A vulnerability in the handling of IEEE 802.11w Protected Management Frames (PMFs) of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the affected software does not properly validate 802.11w disassociation and deauthentication PMFs that it receives. An attacker could exploit this vulnerability by sending a spoofed 802.11w PMF from a valid, authenticated client on a network adjacent to an affected device. A successful exploit could allow the attacker to terminate a single valid user connection to the affected device.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3206?
The severity of CVE-2020-3206 is considered high, due to its potential impact on user connection availability.
How do I fix CVE-2020-3206?
To fix CVE-2020-3206, upgrade to the appropriate version of Cisco IOS XE Software that addresses the vulnerability.
What devices are affected by CVE-2020-3206?
CVE-2020-3206 affects Cisco Catalyst 9800 Series Wireless Controllers running specific versions of Cisco IOS XE Software.
Can CVE-2020-3206 be exploited remotely?
CVE-2020-3206 cannot be exploited remotely as it requires an adjacent attacker to terminate a valid user connection.
What is the impact of CVE-2020-3206?
The impact of CVE-2020-3206 is the potential termination of valid user connections, which can lead to denial of service.