{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20354", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.647Z", "datePublished": "2024-03-27T16:47:04.924Z", "dateUpdated": "2024-08-01T21:59:41.707Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-03-27T16:47:04.924Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.\r\n\r This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition."}], "affected": [{"vendor": "Cisco", "product": "Cisco Aironet Access Point Software", "versions": [{"version": "N/A", "status": "affected"}]}, {"vendor": "Cisco", "product": "Cisco Aironet Access Point Software (IOS XE Controller)", "versions": [{"version": "N/A", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Cleanup on Thrown Exception", "type": "cwe", "cweId": "CWE-460"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW", "name": "cisco-sa-airo-ap-dos-PPPtcVW"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-airo-ap-dos-PPPtcVW", "discovery": "EXTERNAL", "defects": ["CSCwh81027"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-18T22:49:23.614193Z", "id": "CVE-2024-20354", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-23T18:28:01.520Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:41.707Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW", "name": "cisco-sa-airo-ap-dos-PPPtcVW", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW", "name": "cisco-sa-airo-ap-dos-PPPtcVW", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:41.707Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20354", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-18T22:49:23.614193Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-18T22:49:28.374Z"}}], "cna": {"source": {"defects": ["CSCwh81027"], "advisory": "cisco-sa-airo-ap-dos-PPPtcVW", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Aironet Access Point Software", "versions": [{"status": "affected", "version": "N/A"}]}, {"vendor": "Cisco", "product": "Cisco Aironet Access Point Software (IOS XE Controller)", "versions": [{"status": "affected", "version": "N/A"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW", "name": "cisco-sa-airo-ap-dos-PPPtcVW"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.\r\n\r This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-460", "description": "Improper Cleanup on Thrown Exception"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-03-27T16:47:04.924Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20354", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:59:41.707Z", "dateReserved": "2023-11-08T15:08:07.647Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-03-27T16:47:04.924Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E1EA626-452F-4B1D-9DFA-1DFC2C948EB3", "versionEndExcluding": "8.6.0.0", "versionStartIncluding": "8.5.171.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "2D12A362-FA6B-4505-92DC-4F2072B22DB5", "versionEndExcluding": "8.10.190.81", "versionStartIncluding": "8.10.130.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:aironet_1530e:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3FF0BCA-4904-43B2-94F9-2B5A6A996096", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1530i:-:*:*:*:*:*:*:*", "matchCriteriaId": "17020D8A-4ABE-4C5C-A1BE-945C4A9E92DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552h:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BA6C6D9-9980-4EE7-9A7D-02D5D34DE878", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1E891D9-6F4E-4719-ADA2-5128ECEAA9EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552wu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFF6AF41-47AC-41F4-93CE-7E2BA59F3364", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7755B1F0-A7EB-482A-9E40-25F6DACFA63A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_2700e:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA2C4F66-F6B5-4901-9BCE-87A4856D4C34", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_2700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "8010EB74-E5F8-41E0-84D0-A0F21793747C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700e:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB8E4C40-6015-4C63-AA60-3DB220AC6810", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "45FDCF87-A36B-4CED-9815-A9A173729B3A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCE71E9F-BCFE-4F02-9440-3714445CF6D5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap801:-:*:*:*:*:*:*:*", "matchCriteriaId": "A91F8624-B006-44E4-8767-339E96DE8BDB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap802:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E49EFA9-3D86-491E-8854-826861512925", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap803:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD61BE4C-8C2E-4087-9B03-D5788CCCCF16", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:iw3700:-:*:*:*:*:*:*:*", "matchCriteriaId": "9919E498-C454-4CEA-A393-19118F4B1589", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "matchCriteriaId": "9643FDBC-697D-4F87-87F2-5B784833EEBC", "versionEndExcluding": "17.1.0", "versionStartIncluding": "16.12.4a", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "matchCriteriaId": "36DD09BF-ED3C-46EB-86BA-0D70C66ED6EE", "versionEndExcluding": "17.3.9", "versionStartIncluding": "17.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "matchCriteriaId": "8AB9DF30-8950-4826-8458-800ED5112A6A", "versionEndExcluding": "17.6.7", "versionStartIncluding": "17.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "matchCriteriaId": "59F62008-2AC3-455E-8EFF-42E42CFCE016", "versionEndExcluding": "17.9.5", "versionStartIncluding": "17.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "matchCriteriaId": "61B9ED9E-E9D7-4AA4-9C4D-D564B1F871BF", "versionEndExcluding": "17.12.2", "versionStartIncluding": "17.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:aironet_1530e:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3FF0BCA-4904-43B2-94F9-2B5A6A996096", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1530i:-:*:*:*:*:*:*:*", "matchCriteriaId": "17020D8A-4ABE-4C5C-A1BE-945C4A9E92DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552h:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BA6C6D9-9980-4EE7-9A7D-02D5D34DE878", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1E891D9-6F4E-4719-ADA2-5128ECEAA9EB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1552wu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFF6AF41-47AC-41F4-93CE-7E2BA59F3364", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_1700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "7755B1F0-A7EB-482A-9E40-25F6DACFA63A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_2700e:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA2C4F66-F6B5-4901-9BCE-87A4856D4C34", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_2700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "8010EB74-E5F8-41E0-84D0-A0F21793747C", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700e:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB8E4C40-6015-4C63-AA60-3DB220AC6810", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700i:-:*:*:*:*:*:*:*", "matchCriteriaId": "45FDCF87-A36B-4CED-9815-A9A173729B3A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:aironet_3700p:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCE71E9F-BCFE-4F02-9440-3714445CF6D5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap801:-:*:*:*:*:*:*:*", "matchCriteriaId": "A91F8624-B006-44E4-8767-339E96DE8BDB", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap802:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E49EFA9-3D86-491E-8854-826861512925", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:ap803:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD61BE4C-8C2E-4087-9B03-D5788CCCCF16", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:iw3700:-:*:*:*:*:*:*:*", "matchCriteriaId": "9919E498-C454-4CEA-A393-19118F4B1589", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.\r\n\r This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en el manejo de tramas inal\u00e1mbricas cifradas del software Cisco Aironet Access Point (AP) podr\u00eda permitir que un atacante adyacente no autenticado cause una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en el dispositivo afectado. Esta vulnerabilidad se debe a una limpieza incompleta de recursos al eliminar ciertos marcos con formato incorrecto. Un atacante podr\u00eda aprovechar esta vulnerabilidad conect\u00e1ndose como cliente inal\u00e1mbrico a un AP afectado y enviando tramas espec\u00edficas con formato incorrecto a trav\u00e9s de la conexi\u00f3n inal\u00e1mbrica. Un exploit exitoso podr\u00eda permitir que el atacante cause una degradaci\u00f3n del servicio a otros clientes, lo que potencialmente podr\u00eda conducir a una condici\u00f3n DoS completa."}], "id": "CVE-2024-20354", "lastModified": "2025-08-13T17:18:10.143", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.0, "source": "[email protected]", "type": "Primary"}]}, "published": "2024-03-27T17:15:53.660", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-460"}], "source": "[email protected]", "type": "Secondary"}]}

{}