8.6

CVE-2024-20271: cisco business_access_points Improper Input Validation

CVSS: 8.6v3.1HighAnalyzed
Published 27-03-2024Last modified 01-08-2024
Open JSON

Vulnerability summary

CVE-2024-20271 is a high (CVSS 8.6) Improper Input Validation vulnerability in cisco business_access_points. EPSS estimates a 0.63% chance of exploitation in the next 30 days, higher than 49.3% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.6/10
010
High · v3.1 (CVE.org)
EPSS score
0.63%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 27-03-2024
    PublishedVulnerability first disclosed.
  2. 01-08-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.63%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

0.00 pp

From 0.63% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco6 products
  • business_access_points< 10.9.1.0 | < 10.6.2.0
  • cisco aironet access point software8.2.100.0 | 8.2.130.0 | 8.2.111.0 | 8.2.110.0 | 8.2.121.0 | 8.2.141.0 | 8.2.151.0 | 8.2.160.0 | 8.2.161.0 | 8.2.164.0 | 8.2.166.0 | 8.2.170.0 | 8.2.163.0 | 8.3.102.0 | 8.3.111.0 | 8.3.112.0 | 8.3.121.0 | 8.3.122.0 | 8.3.130.0 | 8.3.131.0 | 8.3.132.0 | 8.3.133.0 | 8.3.140.0 | 8.3.141.0 | 8.3.143.0 | 8.3.150.0 | 8.3.108.0 | 8.3.90.53 | 8.3.104.46 | 8.3.200.200 | 8.3.104.64 | 8.3.15.165 | 8.3.90.11 | 8.3.135.0 | 8.3.104.14 | 8.3.90.36 | 8.3.15.142 | 8.3.104.37 | 8.3.15.117 | 8.3.15.120 | 8.3.15.25 | 8.3.15.158 | 8.3.15.118 | 8.3.90.25 | 8.3.15.169 | 8.3.90.58 | 8.4.100.0 | 8.4.1.199 | 8.4.1.91 | 8.4.1.142 | 8.4.1.175 | 8.4.1.218 | 8.4.1.92 | 8.5.103.0 | 8.5.105.0 | 8.5.110.0 | 8.5.120.0 | 8.5.131.0 | 8.5.140.0 | 8.5.135.0 | 8.5.151.0 | 8.5.101.0 | 8.5.102.0 | 8.5.161.0 | 8.5.160.0 | 8.5.100.0 | 8.5.171.0 | 8.5.164.0 | 8.5.182.0 | 8.5.182.11 ME | 8.7.102.0 | 8.7.106.0 | 8.7.1.16 | 8.8.100.0 | 8.8.111.0 | 8.8.120.0 | 8.8.125.0 | 8.8.130.0 | 8.6.101.0 | 8.6.1.84 | 8.6.1.70 | 8.6.1.71 | 8.9.100.0 | 8.9.111.0 | 8.10.105.0 | 8.10.111.0 | 8.10.130.0 | 8.10.112.0 | 8.10.122.0 | 8.10.113.0 | 8.10.121.0 | 8.10.141.0 | 8.10.142.0 | 8.10.151.0 | 8.10.150.0 | 8.10.171.0 | 8.10.181.0 | 8.10.182.0 | 8.10.161.0 | 8.10.170.0 | 8.10.183.0 | 8.10.162.0 | 8.10.185.0
  • cisco aironet access point software (ios xe controller)16.10.1e | 16.10.1 | 17.1.1t | 17.1.1s | 17.1.1 | 16.11.1a | 16.11.1 | 16.11.1c | 16.11.1b | 16.12.1s | 16.12.4 | 16.12.1 | 16.12.2s | 16.12.1t | 16.12.4a | 16.12.5 | 16.12.3 | 16.12.6 | 16.12.8 | 16.12.7 | 16.12.6a | 17.3.1 | 17.3.2a | 17.3.3 | 17.3.4 | 17.3.5 | 17.3.2 | 17.3.4c | 17.3.5a | 17.3.5b | 17.3.6 | 17.2.1 | 17.2.1a | 17.2.3 | 17.2.2 | 17.5.1 | 17.4.1 | 17.4.2 | 17.6.1 | 17.6.2 | 17.6.3 | 17.6.4 | 17.6.5 | 17.10.1 | 17.9.1 | 17.9.2 | 17.9.3 | 17.9.4 | 17.9.4a | 17.7.1 | 17.8.1 | 17.11.1 | 17.12.1
  • cisco business wireless access point software1.0.0.10 | 10.0.2.0 | 1.0.1.10 | 10.1.2.0 | 10.2.1.0 | 10.2.2.0 | 10.3.1.0 | 10.3.1.1 | 10.3.2.0 | 1.0.0.13 | 1.0.0.16 | 1.0.0.3 | 1.0.0.39 | 1.0.0.4 | 1.0.0.5 | 1.0.0.7 | 1.0.1.2 | 1.0.1.3 | 1.0.1.4 | 1.0.1.5 | 1.0.1.6 | 1.0.1.7 | 1.0.2.0 | 1.0.2.13 | 1.0.2.14 | 1.0.2.15 | 1.0.2.16 | 1.0.2.17 | 1.0.2.2 | 1.0.2.8 | 1.0.3.1 | 1.0.4.4 | 1.0.4.3 | 1.0.6.6 | 1.0.3.4 | 1.0.6.8 | 1.0.6.2 | 1.0.2.3 | 1.0.5.3 | 1.0.4.2 | 1.0.6.5 | 1.0.6.7 | 1.0.5.0 | 1.0.0.12 | 1.0.0.14 | 1.0.0.15 | 1.0.0.17 | 1.0.0.9 | 1.0.1.11 | 1.0.1.12 | 1.0.1.9 | 1.0.2.6 | 1.1.0.5 | 1.1.0.7 | 1.1.0.9 | 1.1.1.0 | 1.1.2.4 | 1.1.4.6 | 1.1.3.2 | 1.1.4.0 | 1.1.0.3 | 1.1.0.4 | 1.1.0.6 | 1.1.2.3 | 10.4.1.0 | 10.4.2.0 | 10.6.1.0 | 10.7.1.0 | 10.8.1.0 | 1.2.0.2 | 1.2.0.3 | 1.2.1.3 | 1.3.0.3 | 1.3.0.4 | 1.3.0.6 | 1.3.0.7 | 10.5.2.0
  • ios_xe< 17.3.8 | ≥ 17.4, < 17.6.6 | ≥ 17.7, < 17.9.5 | ≥ 17.10, < 17.12.2

1 vendor · 6 products

References

1 links