CVE-2024-20354 (CNNVD-202403-2850)
中文标题:
Cisco Aironet Access Point Software 安全漏洞
英文标题:
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Soft...
漏洞描述
中文描述:
Cisco Aironet是美国思科（Cisco）公司的一系列无线网络设备。 Cisco Aironet Access Point Software 存在安全漏洞，该漏洞源于处理加密无线帧时存在漏洞，未经身份验证的相邻攻击者可能会在受影响的设备上造成拒绝服务 (DoS) 。
英文描述:
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | N/A | - | - |
cpe:2.3:a:cisco:cisco_aironet_access_point_software:n_a:*:*:*:*:*:*:*
|
| Cisco | Cisco Aironet Access Point Software (IOS XE Controller) | N/A | - | - |
cpe:2.3:a:cisco:cisco_aironet_access_point_software_(ios_xe_controller):n_a:*:*:*:*:*:*:*
|
| cisco | wireless_lan_controller_software | * | - | - |
cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*
|
| cisco | ios_xe | * | - | - |
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2024-20354 |
2025-11-11 15:22:24 | 2025-11-11 07:39:03 |
| NVD | nvd_CVE-2024-20354 |
2025-11-11 14:59:48 | 2025-11-11 07:47:05 |
| CNNVD | cnnvd_CNNVD-202403-2850 |
2025-11-11 15:11:32 | 2025-11-11 07:58:36 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202403-2850
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 2 -> 4
- data_sources: ['cve'] -> ['cve', 'nvd']