CVE-2019-15265
Estado: ModificadaMedia (6.5)—
A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless clients are forwarded incorrectly. An attacker could exploit this vulnerability on the wireless network by sending a steady stream of crafted BPDU frames. A successful exploit could allow the attacker to cause a limited denial of service (DoS) attack because an AP port could go offline.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.32%
- Percentil entre todas las CVEs puntuadas: 23
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-20
- CWE-20
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-15265",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2019-15265",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-11-21T18:56:09.298017Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 2.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Aironet Access Point Software",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "n/a",
"versionType": "custom"
}
]
}
]
}
],
"published": "2019-10-16T19:15:14.147",
"references": [
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-dos",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-airo-dos",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the bridge protocol data unit (BPDU) forwarding functionality of Cisco Aironet Access Points (APs) could allow an unauthenticated, adjacent attacker to cause an AP port to go into an error disabled state. The vulnerability occurs because BPDUs received from specific wireless clients are forwarded incorrectly. An attacker could exploit this vulnerability on the wireless network by sending a steady stream of crafted BPDU frames. A successful exploit could allow the attacker to cause a limited denial of service (DoS) attack because an AP port could go offline."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funcionalidad de reenvío de bridge protocol data unit (BPDU) de Cisco Aironet Access Points (APs), podría permitir a un atacante adyacente no autenticado causar que un puerto del AP entre en un estado de error deshabilitado. La vulnerabilidad se presenta porque las BPDU recibidas de clientes inalámbricos específicos son reenviadas incorrectamente. Un atacante podría explotar esta vulnerabilidad en la red inalámbrica mediante el envío de un flujo constante de tramas BPDU diseñadas. Una explotación con éxito podría permitir al atacante causar un ataque de denegación de servicio (DoS) limitado porque un puerto del AP podría desconectarse."
}
],
"lastModified": "2026-06-17T02:19:58.663",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:aironet_1540_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B75AD68-C993-4FDB-99E6-0CBE8AFE2554",
"versionEndExcluding": "8.5.151.0"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1540_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C230D285-DEF3-4479-9AAD-6B71F1BA6487",
"versionEndExcluding": "8.8.120.0",
"versionStartIncluding": "8.6"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1540_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3230B175-0437-47E5-B23B-58AF12A4D04C",
"versionEndExcluding": "8.9.100.0",
"versionStartIncluding": "8.8.125.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "72BFEED4-7AD7-406F-A044-BDEA98133711"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:aironet_1560_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F790E0C0-EA7E-406F-9BC0-6CE8DD09C21E",
"versionEndExcluding": "8.5.151.0"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1560_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B89D5CF5-9C63-4FE5-B6EF-A1F696A1E495",
"versionEndExcluding": "8.8.120.0",
"versionStartIncluding": "8.6"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1560_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C70F24A0-18C8-4A7B-85C1-FB8B32F14EBE",
"versionEndExcluding": "8.9.100.0",
"versionStartIncluding": "8.8.125.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:aironet_1800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00280E6B-E762-4201-8FB0-55E8FB2BB4C9",
"versionEndExcluding": "8.5.151.0"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A02E232-8A4C-4CD1-AB50-55F3FFE05D78",
"versionEndExcluding": "8.8.120.0",
"versionStartIncluding": "8.6"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_1800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A77DBD8-876B-4167-8078-FD34605FD2B7",
"versionEndExcluding": "8.9.100.0",
"versionStartIncluding": "8.8.125.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:aironet_2800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F1AD8DA-EC9A-40C8-996A-C11964FFB5C3",
"versionEndExcluding": "8.5.151.0"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_2800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B868B17A-4B21-465F-8548-41E2FA70DEF8",
"versionEndExcluding": "8.8.120.0",
"versionStartIncluding": "8.6"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_2800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C51F9B2-3D1D-40E2-A25E-9EA16F572DA6",
"versionEndExcluding": "8.9.100.0",
"versionStartIncluding": "8.8.125.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:aironet_3800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FB06369-FA28-49ED-9D46-371A2E12DDDE",
"versionEndExcluding": "8.5.151.0"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_3800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C5F5995-447D-49D2-9B9B-21328BC9398C",
"versionEndExcluding": "8.8.120.0",
"versionStartIncluding": "8.6"
},
{
"criteria": "cpe:2.3:o:cisco:aironet_3800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5926A2B-C2C3-4FFA-9A99-71E01F97C2F3",
"versionEndExcluding": "8.9.100.0",
"versionStartIncluding": "8.8.125.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}