CVE-2024-20354
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
Published:Mar 27, 2024
Last Modified:Aug 13, 2025
EPS:Mar 27, 2024
EPSS Score:0.00079
CVSS Score:4.7
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Aironet 1530e
Cisco
Aironet 1530e
Vendor
Cisco
Product
Aironet 1530i
Cisco
Aironet 1530i
Vendor
Cisco
Product
Aironet 1552h
Cisco
Aironet 1552h
Vendor
Cisco
Product
Aironet 1552s
Cisco
Aironet 1552s
Vendor
Cisco
Product
Aironet 1552wu
Cisco
Aironet 1552wu
Vendor
Cisco
Product
Aironet 1700i
Cisco
Aironet 1700i
Vendor
Cisco
Product
Aironet 2700e
Cisco
Aironet 2700e
Vendor
Cisco
Product
Aironet 2700i
Cisco
Aironet 2700i
Vendor
Cisco
Product
Aironet 3700e
Cisco
Aironet 3700e
Vendor
Cisco
Product
Aironet 3700i
Cisco
Aironet 3700i
Vendor
Cisco
Product
Aironet 3700p
Cisco
Aironet 3700p
Vendor
Cisco
Product
Ap801
Cisco
Ap801
Vendor
Cisco
Product
Ap802
Cisco
Ap802
Vendor
Cisco
Product
Ap803
Cisco
Ap803
Vendor
Cisco
Product
Ios Xe
Cisco
Ios Xe
Vendor
Cisco
Product
Iw3700
Cisco
Iw3700
Vendor
Cisco
Product
Wireless Lan Controller Software
Cisco
Wireless Lan Controller Software
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
