Cisco Aironet AP Software Vulnerability Could Lead to Denial of Service

CVE-2024-20354

What is CVE-2024-20354?

A vulnerability exists in the Cisco Aironet Access Point Software that permits an unauthenticated attacker in close proximity to induce a denial of service (DoS) condition. This is due to insufficient resource cleanup when certain malformed encrypted wireless frames are dropped. An attacker could exploit this by connecting as a wireless client to the compromised access point and sending crafted malformed frames. The result could lead to service disruption for other connected clients, effectively compromising the reliability of the wireless network.

References