CVE-2024-20354

🗓️ 27 Mar 2024 16:47:04Reported by ciscoType

Vulnerability in Cisco Aironet AP Software handling encrypted wireless frame

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of microprogrammed routing devices with integrated networking services from Cisco ISR 800 and Cisco ISR 1900, microprogrammed access points from Cisco Aironet Access Points (AP) models 1530, 1552, 1570, 1700, 2700, 3700, and microprogrammed wireless industrial access points from Cisco Industrial Wireless 3700, is related to incomplete resource cleanup. This vulnerability allows a malicious actor to trigger service failures.	15 Apr 202500:00	–	bdu_fstec
Cisco	Cisco Aironet Access Point Software Resource Exhaustion Denial of Service Vulnerability	27 Mar 202416:00	–	cisco
CNNVD	Cisco Aironet Access Point Software 安全漏洞	27 Mar 202400:00	–	cnnvd
Cvelist	CVE-2024-20354	27 Mar 202416:47	–	cvelist
EUVD	EUVD-2024-18069	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	28 Mar 202400:00	–	ncsc
NVD	CVE-2024-20354	27 Mar 202417:15	–	nvd
OSV	CVE-2024-20354	27 Mar 202417:15	–	osv
Positive Technologies	PT-2024-18652 · Cisco · Cisco Aironet Access Point	27 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20354	23 May 202510:03	–	redhatcve

NVD

Node

cisco wireless_lan_controller_softwareRange8.5.171.0–8.6.0.0

cisco wireless_lan_controller_softwareRange8.10.130.0–8.10.190.81

AND

cisco aironet_1530eMatch-

cisco aironet_1530iMatch-

cisco aironet_1552hMatch-

cisco aironet_1552sMatch-

cisco aironet_1552wuMatch-

cisco aironet_1700iMatch-

cisco aironet_2700eMatch-

cisco aironet_2700iMatch-

cisco aironet_3700eMatch-

cisco aironet_3700iMatch-

cisco aironet_3700pMatch-

cisco ap801Match-

cisco ap802Match-

cisco ap803Match-

cisco iw3700Match-

Node

cisco ios_xeRange16.12.4a–17.1.0

cisco ios_xeRange17.3.0–17.3.9

cisco ios_xeRange17.4.0–17.6.7

cisco ios_xeRange17.7.0–17.9.5

cisco ios_xeRange17.10.0–17.12.2

AND

cisco aironet_1530eMatch-

cisco aironet_1530iMatch-

cisco aironet_1552hMatch-

cisco aironet_1552sMatch-

cisco aironet_1552wuMatch-

cisco aironet_1700iMatch-

cisco aironet_2700eMatch-

cisco aironet_2700iMatch-

cisco aironet_3700eMatch-

cisco aironet_3700iMatch-

cisco aironet_3700pMatch-

cisco ap801Match-

cisco ap802Match-

cisco ap803Match-

cisco iw3700Match-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Aironet Access Point Software",
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Cisco",
    "product": "Cisco Aironet Access Point Software (IOS XE Controller)",
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-ap-dos-PPPtcVW

13 Aug 2025 17:18Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.14.7 - 7.4

EPSS0.0004

SSVC

CWE-460