CVE-2024-20303

EPSS 0.32%
Veröffentlicht 27.03.2024 17:15:51
Zuletzt bearbeitet 31.07.2025 16:56:36
Erkennungen
Login

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.

 This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 68 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version 17.2.1

Cisco ≫ Ios Xe Version 17.2.1a

Cisco ≫ Ios Xe Version 17.2.1r

Cisco ≫ Ios Xe Version 17.2.1v

Cisco ≫ Ios Xe Version 17.2.2

Cisco ≫ Ios Xe Version 17.2.3

Cisco ≫ Ios Xe Version 17.3.1

Cisco ≫ Ios Xe Version 17.3.1a

Cisco ≫ Ios Xe Version 17.3.1w

Cisco ≫ Ios Xe Version 17.3.1x

Cisco ≫ Ios Xe Version 17.3.1z

Cisco ≫ Ios Xe Version 17.3.2

Cisco ≫ Ios Xe Version 17.3.2a

Cisco ≫ Ios Xe Version 17.3.3

Cisco ≫ Ios Xe Version 17.3.4

Cisco ≫ Ios Xe Version 17.3.4a

Cisco ≫ Ios Xe Version 17.3.4b

Cisco ≫ Ios Xe Version 17.3.4c

Cisco ≫ Ios Xe Version 17.3.5

Cisco ≫ Ios Xe Version 17.3.5a

Cisco ≫ Ios Xe Version 17.3.5b

Cisco ≫ Ios Xe Version 17.3.6

Cisco ≫ Ios Xe Version 17.3.7

Cisco ≫ Ios Xe Version 17.3.8

Cisco ≫ Ios Xe Version 17.3.8a

Cisco ≫ Ios Xe Version 17.4.1

Cisco ≫ Ios Xe Version 17.4.1a

Cisco ≫ Ios Xe Version 17.4.1b

Cisco ≫ Ios Xe Version 17.4.2

Cisco ≫ Ios Xe Version 17.4.2a

Cisco ≫ Ios Xe Version 17.5.1

Cisco ≫ Ios Xe Version 17.5.1a

Cisco ≫ Ios Xe Version 17.6.1

Cisco ≫ Ios Xe Version 17.6.1a

Cisco ≫ Ios Xe Version 17.6.1w

Cisco ≫ Ios Xe Version 17.6.1x

Cisco ≫ Ios Xe Version 17.6.1y

Cisco ≫ Ios Xe Version 17.6.1z

Cisco ≫ Ios Xe Version 17.6.1z1

Cisco ≫ Ios Xe Version 17.6.2

Cisco ≫ Ios Xe Version 17.6.3

Cisco ≫ Ios Xe Version 17.6.3a

Cisco ≫ Ios Xe Version 17.6.4

Cisco ≫ Ios Xe Version 17.6.5

Cisco ≫ Ios Xe Version 17.6.5a

Cisco ≫ Ios Xe Version 17.7.1

Cisco ≫ Ios Xe Version 17.7.1a

Cisco ≫ Ios Xe Version 17.7.1b

Cisco ≫ Ios Xe Version 17.7.2

Cisco ≫ Ios Xe Version 17.8.1

Cisco ≫ Ios Xe Version 17.8.1a

Cisco ≫ Ios Xe Version 17.9.1

Cisco ≫ Ios Xe Version 17.9.1a

Cisco ≫ Ios Xe Version 17.9.1w

Cisco ≫ Ios Xe Version 17.9.1x

Cisco ≫ Ios Xe Version 17.9.1x1

Cisco ≫ Ios Xe Version 17.9.1y

Cisco ≫ Ios Xe Version 17.9.1y1

Cisco ≫ Ios Xe Version 17.9.2

Cisco ≫ Ios Xe Version 17.9.2a

Cisco ≫ Ios Xe Version 17.9.3

Cisco ≫ Ios Xe Version 17.9.3a

Cisco ≫ Ios Xe Version 17.10.1

Cisco ≫ Ios Xe Version 17.10.1a

Cisco ≫ Ios Xe Version 17.10.1b

Cisco ≫ Ios Xe Version 17.11.1

Cisco ≫ Ios Xe Version 17.11.1a

Cisco ≫ Ios Xe Version 17.11.99sw

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.32%	0.237

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	7.4	2.8	4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20303

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20303

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20303

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-20303