CVE-2024-20354
Estado: AnalizadaAlta (7.4)—
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 7.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.29%
- Percentil entre todas las CVEs puntuadas: 20
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-460
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-20354",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-20354",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-07-18T22:49:23.614193Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 4.7,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Aironet Access Point Software",
"versions": [
{
"status": "affected",
"version": "N/A"
}
]
},
{
"vendor": "Cisco",
"product": "Cisco Aironet Access Point Software (IOS XE Controller)",
"versions": [
{
"status": "affected",
"version": "N/A"
}
]
}
]
}
],
"published": "2024-03-27T17:15:53.660",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-460"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.\r\n\r This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el manejo de tramas inalámbricas cifradas del software Cisco Aironet Access Point (AP) podría permitir que un atacante adyacente no autenticado cause una condición de denegación de servicio (DoS) en el dispositivo afectado. Esta vulnerabilidad se debe a una limpieza incompleta de recursos al eliminar ciertos marcos con formato incorrecto. Un atacante podría aprovechar esta vulnerabilidad conectándose como cliente inalámbrico a un AP afectado y enviando tramas específicas con formato incorrecto a través de la conexión inalámbrica. Un exploit exitoso podría permitir que el atacante cause una degradación del servicio a otros clientes, lo que potencialmente podría conducir a una condición DoS completa."
}
],
"lastModified": "2026-06-17T07:06:47.737",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E1EA626-452F-4B1D-9DFA-1DFC2C948EB3",
"versionEndExcluding": "8.6.0.0",
"versionStartIncluding": "8.5.171.0"
},
{
"criteria": "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D12A362-FA6B-4505-92DC-4F2072B22DB5",
"versionEndExcluding": "8.10.190.81",
"versionStartIncluding": "8.10.130.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_1530e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3FF0BCA-4904-43B2-94F9-2B5A6A996096"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1530i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17020D8A-4ABE-4C5C-A1BE-945C4A9E92DC"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BA6C6D9-9980-4EE7-9A7D-02D5D34DE878"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F1E891D9-6F4E-4719-ADA2-5128ECEAA9EB"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552wu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FFF6AF41-47AC-41F4-93CE-7E2BA59F3364"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7755B1F0-A7EB-482A-9E40-25F6DACFA63A"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_2700e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AA2C4F66-F6B5-4901-9BCE-87A4856D4C34"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_2700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8010EB74-E5F8-41E0-84D0-A0F21793747C"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BB8E4C40-6015-4C63-AA60-3DB220AC6810"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "45FDCF87-A36B-4CED-9815-A9A173729B3A"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CCE71E9F-BCFE-4F02-9440-3714445CF6D5"
},
{
"criteria": "cpe:2.3:h:cisco:ap801:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A91F8624-B006-44E4-8767-339E96DE8BDB"
},
{
"criteria": "cpe:2.3:h:cisco:ap802:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4E49EFA9-3D86-491E-8854-826861512925"
},
{
"criteria": "cpe:2.3:h:cisco:ap803:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD61BE4C-8C2E-4087-9B03-D5788CCCCF16"
},
{
"criteria": "cpe:2.3:h:cisco:iw3700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9919E498-C454-4CEA-A393-19118F4B1589"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9643FDBC-697D-4F87-87F2-5B784833EEBC",
"versionEndExcluding": "17.1.0",
"versionStartIncluding": "16.12.4a"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36DD09BF-ED3C-46EB-86BA-0D70C66ED6EE",
"versionEndExcluding": "17.3.9",
"versionStartIncluding": "17.3.0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AB9DF30-8950-4826-8458-800ED5112A6A",
"versionEndExcluding": "17.6.7",
"versionStartIncluding": "17.4.0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59F62008-2AC3-455E-8EFF-42E42CFCE016",
"versionEndExcluding": "17.9.5",
"versionStartIncluding": "17.7.0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61B9ED9E-E9D7-4AA4-9C4D-D564B1F871BF",
"versionEndExcluding": "17.12.2",
"versionStartIncluding": "17.10.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:aironet_1530e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3FF0BCA-4904-43B2-94F9-2B5A6A996096"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1530i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17020D8A-4ABE-4C5C-A1BE-945C4A9E92DC"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552h:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BA6C6D9-9980-4EE7-9A7D-02D5D34DE878"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F1E891D9-6F4E-4719-ADA2-5128ECEAA9EB"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1552wu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FFF6AF41-47AC-41F4-93CE-7E2BA59F3364"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_1700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7755B1F0-A7EB-482A-9E40-25F6DACFA63A"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_2700e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AA2C4F66-F6B5-4901-9BCE-87A4856D4C34"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_2700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8010EB74-E5F8-41E0-84D0-A0F21793747C"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BB8E4C40-6015-4C63-AA60-3DB220AC6810"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700i:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "45FDCF87-A36B-4CED-9815-A9A173729B3A"
},
{
"criteria": "cpe:2.3:h:cisco:aironet_3700p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CCE71E9F-BCFE-4F02-9440-3714445CF6D5"
},
{
"criteria": "cpe:2.3:h:cisco:ap801:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A91F8624-B006-44E4-8767-339E96DE8BDB"
},
{
"criteria": "cpe:2.3:h:cisco:ap802:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4E49EFA9-3D86-491E-8854-826861512925"
},
{
"criteria": "cpe:2.3:h:cisco:ap803:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD61BE4C-8C2E-4087-9B03-D5788CCCCF16"
},
{
"criteria": "cpe:2.3:h:cisco:iw3700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9919E498-C454-4CEA-A393-19118F4B1589"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}