CVE-2024-20271
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. T
Description
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.
Weakness: CWE-20
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | Routing & Switching | cna-assigner |
| Cisco | Cisco Business Wireless Access Points | Routing & Switching | cna-assigner |
Vendor-reported products (4)
- Cisco · Cisco Aironet Access Point Software
- Cisco · Cisco Business Wireless Access Point Software
- Cisco · Cisco Aironet Access Point Software (IOS XE Controller)
- cisco · aironet_access_point_software
Vendor advisory
Cisco Access Point Software Denial of Service Vulnerability
Cisco’s rating: High (advisory CVSS 8.6) · Published Mar 27, 2024
Bug ID: CSCwh00028
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from