Skip to content
Fencer Vulns
high 8.1

CVE-2020-3261 json

Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability

published 2020-04-15 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-24532

cvss
8.1
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 43%
public exploits
0
none known

Summary

A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user with an active session on an affected device to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions, including modifying the configuration, with the privilege level of the user.

Patch / fix

  • cisco aironet_1542i_firmware 8.8.130.0
  • cisco aironet_1542d_firmware 8.8.130.0
  • cisco aironet_1562i_firmware 8.8.130.0
  • cisco aironet_1562e_firmware 8.8.130.0
  • cisco aironet_1562d_firmware 8.8.130.0
  • cisco aironet_1815_firmware 8.8.130.0
  • cisco aironet_1830_firmware 8.8.130.0
  • cisco aironet_1840_firmware 8.8.130.0
  • cisco aironet_1850_firmware 8.8.130.0
  • cisco aironet_2800i_firmware 8.8.130.0
  • cisco aironet_2800e_firmware 8.8.130.0
  • cisco aironet_3800i_firmware 8.8.130.0
  • cisco aironet_3800e_firmware 8.8.130.0
  • cisco aironet_3800p_firmware 8.8.130.0
  • cisco aironet_4800_firmware 8.8.130.0
  • cisco catalyst_iw6300_firmware 8.8.130.0
  • cisco 6300_series_access_points_firmware 8.8.130.0

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
23 mo ago

Exploit prediction

0.50% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • Cisco Cisco Mobility Express

Classification

Weakness
  • CWE-352 Cross-Site Request Forgery

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.