CVE:CVE-2020-3261
CNNVD:CNNVD-202004-1102
Cisco Mobility Express Software是美国思科（Cisco）公司的一套使用在Cisco无线接入点设备中的软件。
Cisco Mobility Express Software中的基于Web的管理接口存在跨站请求伪造漏洞。攻击者可通过诱使用户点击恶意链接利用该漏洞进行任意操作。以下产品及版本受到影响：Cisco Aironet 1540 Series Access Points；Aironet 1560 Series Access Points；Aironet 1800 Series Access Points；Aironet 2800 Series Access Points；Aironet 3800 Series Access Points；Aironet 4800 Series Access Points；Catalyst IW6300 Access Points；6300 Embedded Services Access Points。
solution:Upgrade cisco aironet_1542i_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1542d_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1562i_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1562e_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1562d_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1815_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1830_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1840_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_1850_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_2800i_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_2800e_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_3800i_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_3800e_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_3800p_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco aironet_4800_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco catalyst_iw6300_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255); Upgrade cisco 6300_series_access_points_firmware to a higher version than 8.8.130.0,8.10(1.255,and avoid the version [8.0,8.8.130.0),8.10(1.255)