CVE-2024-20354

Published Mar 27, 2024 CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.

This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Aironet Access Point Software

affected

Version	Status	Constraints
`N/A`	affected	—

Cisco

Cisco Aironet Access Point Software (IOS XE Controller)

affected

Version	Status	Constraints
`N/A`	affected	—

Configuration 1 [-]

AND

OR	cpe:2.3:a:cisco:wireless_lan_controller_software::::::::
	cpe:2.3:a:cisco:wireless_lan_controller_software::::::::

OR	cpe:2.3:h:cisco:aironet_1530e:-:::::::*
	cpe:2.3:h:cisco:aironet_1530i:-:::::::*
	cpe:2.3:h:cisco:aironet_1552h:-:::::::*
	cpe:2.3:h:cisco:aironet_1552s:-:::::::*
	cpe:2.3:h:cisco:aironet_1552wu:-:::::::*
	cpe:2.3:h:cisco:aironet_1700i:-:::::::*
	cpe:2.3:h:cisco:aironet_2700e:-:::::::*
	cpe:2.3:h:cisco:aironet_2700i:-:::::::*
	cpe:2.3:h:cisco:aironet_3700e:-:::::::*
	cpe:2.3:h:cisco:aironet_3700i:-:::::::*
	cpe:2.3:h:cisco:aironet_3700p:-:::::::*
	cpe:2.3:h:cisco:ap801:-:::::::*
	cpe:2.3:h:cisco:ap802:-:::::::*
	cpe:2.3:h:cisco:ap803:-:::::::*
	cpe:2.3:h:cisco:iw3700:-:::::::*

Configuration 2 [-]

AND

OR	cpe:2.3:o:cisco:ios_xe::::::::
	cpe:2.3:o:cisco:ios_xe::::::::
	cpe:2.3:o:cisco:ios_xe::::::::
	cpe:2.3:o:cisco:ios_xe::::::::
	cpe:2.3:o:cisco:ios_xe::::::::

OR	cpe:2.3:h:cisco:aironet_1530e:-:::::::*
	cpe:2.3:h:cisco:aironet_1530i:-:::::::*
	cpe:2.3:h:cisco:aironet_1552h:-:::::::*
	cpe:2.3:h:cisco:aironet_1552s:-:::::::*
	cpe:2.3:h:cisco:aironet_1552wu:-:::::::*
	cpe:2.3:h:cisco:aironet_1700i:-:::::::*
	cpe:2.3:h:cisco:aironet_2700e:-:::::::*
	cpe:2.3:h:cisco:aironet_2700i:-:::::::*
	cpe:2.3:h:cisco:aironet_3700e:-:::::::*
	cpe:2.3:h:cisco:aironet_3700i:-:::::::*
	cpe:2.3:h:cisco:aironet_3700p:-:::::::*
	cpe:2.3:h:cisco:ap801:-:::::::*
	cpe:2.3:h:cisco:ap802:-:::::::*
	cpe:2.3:h:cisco:ap803:-:::::::*
	cpe:2.3:h:cisco:iw3700:-:::::::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-18069	A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.

Metrics

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.294% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW

History

Aug 13, 2025 5:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco aironet 1530e Cisco aironet 1530i Cisco aironet 1552h Cisco aironet 1552s Cisco aironet 1552wu Cisco aironet 1700i Cisco aironet 2700e Cisco aironet 2700i Cisco aironet 3700e Cisco aironet 3700i Cisco aironet 3700p Cisco ap801 Cisco ap802 Cisco ap803 Cisco ios Xe Cisco iw3700 Cisco wireless Lan Controller Software
CPEs		cpe:2.3:a:cisco:wireless_lan_controller_software:::::::: cpe:2.3:h:cisco:aironet_1530e:-:::::::* cpe:2.3:h:cisco:aironet_1530i:-:::::::* cpe:2.3:h:cisco:aironet_1552h:-:::::::* cpe:2.3:h:cisco:aironet_1552s:-:::::::* cpe:2.3:h:cisco:aironet_1552wu:-:::::::* cpe:2.3:h:cisco:aironet_1700i:-:::::::* cpe:2.3:h:cisco:aironet_2700e:-:::::::* cpe:2.3:h:cisco:aironet_2700i:-:::::::* cpe:2.3:h:cisco:aironet_3700e:-:::::::* cpe:2.3:h:cisco:aironet_3700i:-:::::::* cpe:2.3:h:cisco:aironet_3700p:-:::::::* cpe:2.3:h:cisco:ap801:-:::::::* cpe:2.3:h:cisco:ap802:-:::::::* cpe:2.3:h:cisco:ap803:-:::::::* cpe:2.3:h:cisco:iw3700:-:::::::* cpe:2.3:o:cisco:ios_xe::::::::
Vendors & Products		Cisco Cisco aironet 1530e Cisco aironet 1530i Cisco aironet 1552h Cisco aironet 1552s Cisco aironet 1552wu Cisco aironet 1700i Cisco aironet 2700e Cisco aironet 2700i Cisco aironet 3700e Cisco aironet 3700i Cisco aironet 3700p Cisco ap801 Cisco ap802 Cisco ap803 Cisco ios Xe Cisco iw3700 Cisco wireless Lan Controller Software

Subscriptions

Cisco Aironet 1530e Aironet 1530i Aironet 1552h Aironet 1552s Aironet 1552wu Aironet 1700i Aironet 2700e Aironet 2700i Aironet 3700e Aironet 3700i Aironet 3700p Ap801 Ap802 Ap803 Ios Xe Iw3700 Wireless Lan Controller Software

Weaknesses