Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-20354

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.

Published

2024-03-27T17:15:53.660

Last Modified

2025-08-13T17:18:10.143

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-460
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco wireless_lan_controller_software < 8.6.0.0 Yes
Application cisco wireless_lan_controller_software < 8.10.190.81 Yes
Hardware cisco aironet_1530e - No
Hardware cisco aironet_1530i - No
Hardware cisco aironet_1552h - No
Hardware cisco aironet_1552s - No
Hardware cisco aironet_1552wu - No
Hardware cisco aironet_1700i - No
Hardware cisco aironet_2700e - No
Hardware cisco aironet_2700i - No
Hardware cisco aironet_3700e - No
Hardware cisco aironet_3700i - No
Hardware cisco aironet_3700p - No
Hardware cisco ap801 - No
Hardware cisco ap802 - No
Hardware cisco ap803 - No
Hardware cisco iw3700 - No
Operating System cisco ios_xe < 17.1.0 Yes
Operating System cisco ios_xe < 17.3.9 Yes
Operating System cisco ios_xe < 17.6.7 Yes
Operating System cisco ios_xe < 17.9.5 Yes
Operating System cisco ios_xe < 17.12.2 Yes
Hardware cisco aironet_1530e - No
Hardware cisco aironet_1530i - No
Hardware cisco aironet_1552h - No
Hardware cisco aironet_1552s - No
Hardware cisco aironet_1552wu - No
Hardware cisco aironet_1700i - No
Hardware cisco aironet_2700e - No
Hardware cisco aironet_2700i - No
Hardware cisco aironet_3700e - No
Hardware cisco aironet_3700i - No
Hardware cisco aironet_3700p - No
Hardware cisco ap801 - No
Hardware cisco ap802 - No
Hardware cisco ap803 - No
Hardware cisco iw3700 - No
References