CVE-2020-3560

A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by sending a series of crafted UDP packets to a specific port on an affected device. A successful exploit could either allow the attacker to tear down the connection between the AP and the wireless LAN controller, resulting in the affected device not being able to process client traffic, or cause the vulnerable device to reload, triggering a DoS condition. After the attack, the affected device should automatically recover its normal functions without manual intervention.

• CWE-400
• CWE-400

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-dos-VHr2zG9yVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-dos-VHr2zG9yVendor Advisory

Published

Sep 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35591Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The app…5.4
• CVE-2020-35592Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options heade…5.4
• CVE-2020-35593BMC PATROL Agent through 20.08.00 allows local privilege esc…7.8
• CVE-2020-35594Zoho ManageEngine ADManager Plus before 7066 allows XSS.6.1
• CVE-2020-35597Victor CMS 1.0 is vulnerable to SQL injection via c_id param…8.8
• CVE-2020-35598ACS Advanced Comment System 1.0 is affected by Directory Tra…7.5
• CVE-2020-35604An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is u…9.8
• CVE-2020-35605The Graphics Protocol feature in graphics.c in kitty before …9.8
• CVE-2020-35606Arbitrary command execution can occur in Webmin through 1.96…8.8
• CVE-2020-35608A code execution vulnerability exists in the normal world’s …7.8
• CVE-2020-35609A denial-of-service vulnerability exists in the asynchronous…5.5
• CVE-2020-3561A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco …4.7