Input validation error in Cisco Systems, Inc products - CVE-2024-20271

Vulnerability identifier: #VU87882

CSH Severity: High

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20271

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the IP packet processing of Cisco Access Point (AP) Software. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Cisco Aironet 1540 Series Access Points
Catalyst 9800 Wireless Controller Software
Wide Pluggable Form Factor Wi-Fi 6 AP Module for Industrial Routers
Integrated Access Point on 1100 Integrated Services Routers
Catalyst 9100 Access Points
Aironet 3800 Series Access Points
Aironet 2800 Series Access Points
Aironet 1800 Series Access Points
Aironet 1560 Series Access Points
Business Wireless Access Point Software
Wireless LAN Controller Software
Catalyst IW6300 Heavy Duty Series Access Points
Business 100 Series Mesh Extenders
Aironet 4800 Access Points
Business 200 Series Access Points
6300 Series Embedded Services Access Points

Install update from vendor's website.

Business Wireless Access Point Software - addressed in versions 10.6.2.0, 10.9.1.0
Catalyst 9800 Wireless Controller Software - addressed in versions 17.3.8, 17.6.6, 17.9.5, 17.12.2
Wireless LAN Controller Software - update to 8.10.190.0

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-h9TGGX6W

• Denial of service in Cisco Access Point Software