CVE-2024-20354
published 2024-03-27CVE-2024-20354: A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to…
PriorityP335high7.4CVSS 3.1
AVAACLPRNUINSCCNINAH
EPSS
0.29%
21.3th percentile
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | aironet_access_point | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | ios_xe | >= 16.12.4a < 17.1.0 | 17.1.0 |
| cisco | ios_xe | >= 17.10.0 < 17.12.2 | 17.12.2 |
| cisco | ios_xe | >= 17.3.0 < 17.3.9 | 17.3.9 |
| cisco | ios_xe | >= 17.4.0 < 17.6.7 | 17.6.7 |
| cisco | ios_xe | >= 17.7.0 < 17.9.5 | 17.9.5 |
| cisco | wireless_lan_controller_software | >= 8.10.130.0 < 8.10.190.81 | 8.10.190.81 |
| cisco | wireless_lan_controller_software | >= 8.5.171.0 < 8.6.0.0 | 8.6.0.0 |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
vendor_cisco4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
vendor_cisco·2024-03-27·CVSS 4.7
CVE-2024-20354 [MEDIUM] CWE-460 Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
Cisco has released software updates that address this vulnerabil
Cisco
Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2024-20354 Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
CVE-2024-20354: Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition. Cisco has released software updates that address th
GHSA
GHSA-55h4-826f-9gpq: A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent atta
ghsa_unreviewed·2024-03-27
CVE-2024-20354 [MEDIUM] CWE-460 GHSA-55h4-826f-9gpq: A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent atta
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-27
Published