CVE-2024-20303

EPSS 0.08%
Published 27.03.2024 17:15:51
Last modified 31.07.2025 16:56:36
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.

 This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version17.2.1

Cisco ≫ Ios Xe Version17.2.1a

Cisco ≫ Ios Xe Version17.2.1r

Cisco ≫ Ios Xe Version17.2.1v

Cisco ≫ Ios Xe Version17.2.2

Cisco ≫ Ios Xe Version17.2.3

Cisco ≫ Ios Xe Version17.3.1

Cisco ≫ Ios Xe Version17.3.1a

Cisco ≫ Ios Xe Version17.3.1w

Cisco ≫ Ios Xe Version17.3.1x

Cisco ≫ Ios Xe Version17.3.1z

Cisco ≫ Ios Xe Version17.3.2

Cisco ≫ Ios Xe Version17.3.2a

Cisco ≫ Ios Xe Version17.3.3

Cisco ≫ Ios Xe Version17.3.4

Cisco ≫ Ios Xe Version17.3.4a

Cisco ≫ Ios Xe Version17.3.4b

Cisco ≫ Ios Xe Version17.3.4c

Cisco ≫ Ios Xe Version17.3.5

Cisco ≫ Ios Xe Version17.3.5a

Cisco ≫ Ios Xe Version17.3.5b

Cisco ≫ Ios Xe Version17.3.6

Cisco ≫ Ios Xe Version17.3.7

Cisco ≫ Ios Xe Version17.3.8

Cisco ≫ Ios Xe Version17.3.8a

Cisco ≫ Ios Xe Version17.4.1

Cisco ≫ Ios Xe Version17.4.1a

Cisco ≫ Ios Xe Version17.4.1b

Cisco ≫ Ios Xe Version17.4.2

Cisco ≫ Ios Xe Version17.4.2a

Cisco ≫ Ios Xe Version17.5.1

Cisco ≫ Ios Xe Version17.5.1a

Cisco ≫ Ios Xe Version17.6.1

Cisco ≫ Ios Xe Version17.6.1a

Cisco ≫ Ios Xe Version17.6.1w

Cisco ≫ Ios Xe Version17.6.1x

Cisco ≫ Ios Xe Version17.6.1y

Cisco ≫ Ios Xe Version17.6.1z

Cisco ≫ Ios Xe Version17.6.1z1

Cisco ≫ Ios Xe Version17.6.2

Cisco ≫ Ios Xe Version17.6.3

Cisco ≫ Ios Xe Version17.6.3a

Cisco ≫ Ios Xe Version17.6.4

Cisco ≫ Ios Xe Version17.6.5

Cisco ≫ Ios Xe Version17.6.5a

Cisco ≫ Ios Xe Version17.7.1

Cisco ≫ Ios Xe Version17.7.1a

Cisco ≫ Ios Xe Version17.7.1b

Cisco ≫ Ios Xe Version17.7.2

Cisco ≫ Ios Xe Version17.8.1

Cisco ≫ Ios Xe Version17.8.1a

Cisco ≫ Ios Xe Version17.9.1

Cisco ≫ Ios Xe Version17.9.1a

Cisco ≫ Ios Xe Version17.9.1w

Cisco ≫ Ios Xe Version17.9.1x

Cisco ≫ Ios Xe Version17.9.1x1

Cisco ≫ Ios Xe Version17.9.1y

Cisco ≫ Ios Xe Version17.9.1y1

Cisco ≫ Ios Xe Version17.9.2

Cisco ≫ Ios Xe Version17.9.2a

Cisco ≫ Ios Xe Version17.9.3

Cisco ≫ Ios Xe Version17.9.3a

Cisco ≫ Ios Xe Version17.10.1

Cisco ≫ Ios Xe Version17.10.1a

Cisco ≫ Ios Xe Version17.10.1b

Cisco ≫ Ios Xe Version17.11.1

Cisco ≫ Ios Xe Version17.11.1a

Cisco ≫ Ios Xe Version17.11.99sw

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.24

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@cisco.com	7.4	2.8	4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20303

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20303

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20303

EUVD