High severity7.5NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-3262

Description

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of CAPWAP packets. An attacker could exploit this vulnerability by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to restart, resulting in a DoS condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./5508 Wireless Controller Firmware
cpe:2.3:o:cisco:5508_wireless_controller_firmware:8.8\(120.0\):*:*:*:*:*:*:*
Cisco Systems, Inc./5520 Wireless Controller Firmware
cpe:2.3:o:cisco:5520_wireless_controller_firmware:8.8\(120.0\):*:*:*:*:*:*:*
Cisco Systems, Inc./Wireless Lan Controller Softwarellm-fuzzy
Cisco Systems, Inc./Aironet Access Point Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-capwap-dos-Y2sD9uEwnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000