CVE-2024-20287 (CNNVD-202401-1079)
中文标题:
Cisco Business Wireless Access Points 安全漏洞
英文标题:
A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio A...
漏洞描述
中文描述:
Cisco Business Wireless Access Points是美国思科（Cisco）公司的商用无线接入解决方案。 Cisco Business Wireless Access Points 存在安全漏洞，该漏洞源于基于 Web 的管理界面中存在漏洞，可能允许经过身份验证的远程攻击者对受影响的设备执行命令注入攻击。
英文描述:
A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup could allow an authenticated, remote attacker to perform command injection attacks against an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit this vulnerability, the attacker must have valid administrative credentials for the device.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Business Wireless Access Point Software | 1.0.1.5 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.0.1.5:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.0.0.10 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.0.0.10:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.0.0.9 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.0.0.9:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.1.2.3 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.1.2.3:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.2.0.2 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.2.0.2:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.2.0.3 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.2.0.3:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.2.1.3 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.2.1.3:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.3.0.3 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.3.0.3:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.3.0.4 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.3.0.4:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.3.0.6 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.3.0.6:*:*:*:*:*:*:*
|
| Cisco | Cisco Business Wireless Access Point Software | 1.3.0.7 | - | - |
cpe:2.3:a:cisco:cisco_business_wireless_access_point_software:1.3.0.7:*:*:*:*:*:*:*
|
| cisco | wap371_firmware | * | - | - |
cpe:2.3:o:cisco:wap371_firmware:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2024-20287 |
2025-11-11 15:22:23 | 2025-11-11 07:39:03 |
| NVD | nvd_CVE-2024-20287 |
2025-11-11 14:59:44 | 2025-11-11 07:47:05 |
| CNNVD | cnnvd_CNNVD-202401-1079 |
2025-11-11 15:11:26 | 2025-11-11 07:58:25 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202401-1079
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 11 -> 12
- data_sources: ['cve'] -> ['cve', 'nvd']