Cisco Aironet Access Point Software: Improper Cleanup on Thrown Exception
CVE-2024-20354 is a high-severity improper cleanup on thrown exception vulnerability in Cisco Aironet Access Point Software from Cisco, with a CVSS 3.1 base score of 7.4 out of 10. It can be exploited from the same local network by an unauthenticated attacker, without any action from a user. There is no confirmed exploitation so far. EPSS estimates a 0.29% chance of exploitation within 30 days, which is low compared with other CVEs.
High severity with no evidence of exploitation so far.
What to do
- Update Wireless Lan Controller Software to 8.6.0.0 or 8.10.190.81, whichever matches your release line, or a later version.
- Update iOS Xe to 17.1.0 or 17.3.9 or 17.6.7 or 17.9.5, whichever matches your release line, or a later version.
- Read the advisory on sec.cloudapps.cisco.com for workarounds and exact fixed builds.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| Cisco | Cisco Aironet Access Point Software | Not specified in the record | Not stated |
| Cisco | Cisco Aironet Access Point Software (IOS XE Controller) | Not specified in the record | Not stated |
| Cisco | Wireless Lan Controller Software | 8.5.171.0 up to, but not including, 8.6.0.0; 8.10.130.0 up to, but not including, 8.10.190.81 | 8.6.0.0, 8.10.190.81 |
| Cisco | iOS Xe | 16.12.4a up to, but not including, 17.1.0; 17.3.0 up to, but not including, 17.3.9; 17.4.0 up to, but not including, 17.6.7; 17.7.0 up to, but not including, 17.9.5; 17.10.0 up to, but not including, 17.12.2 | 17.1.0, 17.3.9, 17.6.7, 17.9.5, 17.12.2 |
Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- AdjacentThe attacker must be on the same local network segment.
- Attack complexity
- LowNo special conditions are needed; the attack works reliably.
- Privileges required
- NoneNo account or login is needed.
- User interaction
- NoneNo action by a victim is required.
- Scope
- ChangedThe attack can reach beyond the vulnerable component into other systems.
- Confidentiality
- NoneNo data is disclosed.
- Integrity
- NoneNothing can be modified.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H. Scored by NVD.
| Scoring system | Score | Severity | Scored by |
|---|---|---|---|
| CVSS 3.1 | 4.7 | Medium | CNA (cisco.com) |
| CVSS 3.1 | 7.4 | High | NVD |
Official description
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to incomplete cleanup of resources when dropping certain malformed frames. An attacker could exploit this vulnerability by connecting as a wireless client to an affected AP and sending specific malformed frames over the wireless connection. A successful exploit could allow the attacker to cause degradation of service to other clients, which could potentially lead to a complete DoS condition.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Improper Cleanup on Thrown Exception
The product does not clean up its state or incorrectly cleans up its state when an exception is thrown.
How developers prevent this class of flaw
- If one breaks from a loop or function by throwing an exception, make sure that cleanup happens or that you should exit the program. Use throwing exceptions sparsely.
More Improper Cleanup on Thrown Exception vulnerabilities (CWE-460)
Timeline
- CVE record published.
- CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: partial).
- Record last changed materially (score, affected products, status or references).
References
Advisories
Other vulnerabilities in Cisco Aironet Access Point Software
- 8.6 High severity
- 8.6 High severity
- 7.5 High severity
Recent Improper Cleanup on Thrown Exception vulnerabilities
- 7.5 High severity
- 7.5 High severity
Spotted an error? Tell us.