CVE-2024-20287

CVE-2024-20287 affects Cisco WAP371 Wireless-AC/N Dual Radio Access Point web-based management interface. Affected: versions prior to 1.3.0.8 (per PT-2024-1591). Vulnerability: authenticated, remote command injection due to improper validation of user input in the management web UI; successful ex...

CVE-2024-20336

The CVE-2024-20336 entry affects Cisco Small Business 100/300/500 Series Wireless APs. The vulnerability is in the web-based management interface, caused by insufficient validation of user-supplied input, enabling an authenticated, remote attacker with valid admin credentials to trigger a buffer ...

CVE-2024-20335

CVE-2024-20335 affects Cisco Small Business 100/300/500 Series Wireless APs. The issue is in the web-based management interface where insufficient validation of input enables an authenticated, remote attacker with valid admin credentials to perform command injection and potentially execute arbitr...

CVE-2018-0415

CVE-2018-0415 describes a DoS in Cisco Small Business 100 Series and 300 Series Wireless Access Points due to improper processing of certain EAPOL frames in the EAPOL implementation. An authenticated, adjacent attacker can send crafted EAPOL frames to force the AP to disassociate all STAs and den...

CVE-2018-0412

The CVE-2018-0412 issue affects Cisco Small Business 100 Series and 300 Series Wireless Access Points, where improper processing of EAPOL messages during the Wi‑Fi handshake allows an unauthenticated adjacent attacker to downgrade the cipher from AES‑CCMP to WPA‑TKIP. This cryptographic downgrade...