Riskcovery

CVE-2024-20271

State
Published
Severity
8.6 High
Published
Mar 27, 2024
Updated
Aug 1, 2024
Reserved
Nov 8, 2023

Read the record on cve.org

Description

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.

Scores

CVSSScoreVectorSource
3.18.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hcisco

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
Cisco Aironet Access Point SoftwareCisco
  • 8.2.100.0Affected
  • 8.2.130.0Affected
  • 8.2.111.0Affected
  • 8.2.110.0Affected
  • 8.2.121.0Affected
  • 8.2.141.0Affected
  • 8.2.151.0Affected
  • 8.2.160.0Affected
  • 8.2.161.0Affected
  • 8.2.164.0Affected
  • 8.2.166.0Affected
  • 8.2.170.0Affected
  • 8.2.163.0Affected
  • 8.3.102.0Affected
  • 8.3.111.0Affected
  • 8.3.112.0Affected
  • 8.3.121.0Affected
  • 8.3.122.0Affected
  • 8.3.130.0Affected
  • 8.3.131.0Affected
  • 8.3.132.0Affected
  • 8.3.133.0Affected
  • 8.3.140.0Affected
  • 8.3.141.0Affected
  • 8.3.143.0Affected
  • and 78 more versions
Cisco Business Wireless Access Point SoftwareCisco
  • 10.0.1.0Affected
  • 10.0.2.0Affected
  • 10.1.1.0Affected
  • 10.1.2.0Affected
  • 10.2.1.0Affected
  • 10.2.2.0Affected
  • 10.3.1.0Affected
  • 10.3.1.1Affected
  • 10.3.2.0Affected
  • 1.0.0.13Affected
  • 1.0.0.16Affected
  • 1.0.0.3Affected
  • 1.0.0.39Affected
  • 1.0.0.4Affected
  • 1.0.0.5Affected
  • 1.0.0.7Affected
  • 1.0.1.2Affected
  • 1.0.1.3Affected
  • 1.0.1.4Affected
  • 1.0.1.5Affected
  • 1.0.1.6Affected
  • 1.0.1.7Affected
  • 1.0.2.0Affected
  • 1.0.2.13Affected
  • 1.0.2.14Affected
  • and 54 more versions
Cisco Aironet Access Point Software (IOS XE Controller)Cisco
  • 16.10.1eAffected
  • 16.10.1Affected
  • 17.1.1tAffected
  • 17.1.1sAffected
  • 17.1.1Affected
  • 16.11.1aAffected
  • 16.11.1Affected
  • 16.11.1cAffected
  • 16.11.1bAffected
  • 16.12.1sAffected
  • 16.12.4Affected
  • 16.12.1Affected
  • 16.12.2sAffected
  • 16.12.1tAffected
  • 16.12.4aAffected
  • 16.12.5Affected
  • 16.12.3Affected
  • 16.12.6Affected
  • 16.12.8Affected
  • 16.12.7Affected
  • 16.12.6aAffected
  • 17.3.1Affected
  • 17.3.2aAffected
  • 17.3.3Affected
  • 17.3.4Affected
  • and 28 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.