Skip to content
Connect AISign inSign up free
CVE-2024-203544.7MediumCWE-460

CVE-2024-20354: Cisco Aironet Access Point Software vulnerability

Cisco · Cisco Aironet Access Point Software

Affected: Cisco Aironet Access Point Software · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days
22nd percentile
050100

Higher than 22% of scored CVEs

4.7MediumCVSS 3.1
LowMedium

DescriptionCVE.org

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Cisco · Cisco Aironet Access Point SoftwareVersions not stated
  • Cisco · Cisco Aironet Access Point Software (IOS XE Controller)Versions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Cisco
Published
March 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2024-20354 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References