CVE-2024-20354
7.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 4.0
Source: NVD
Description
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
Affected (7)
Products: Cisco: Wireless Lan Controller Software, Ios Xe
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 8.10.130.0 to 8.10.190.81 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 16.12.4a to 17.1.0 |
| Running on/with | Platform Versions |
|---|---|
Cisco Aironet 1530e | All versions |
Cisco Aironet 1530i | All versions |
Cisco Aironet 1552h | All versions |
Cisco Aironet 1552s | All versions |
Cisco Aironet 1552wu | All versions |
Cisco Aironet 1700i | All versions |
Cisco Aironet 2700e | All versions |
Cisco Aironet 2700i | All versions |
Cisco Aironet 3700e | All versions |
Cisco Aironet 3700i | All versions |
Cisco Aironet 3700p | All versions |
Cisco Ap801 | All versions |
Cisco Ap802 | All versions |
Cisco Ap803 | All versions |
Cisco Iw3700 | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.