CVE-2024-20303

EPSS 0.08%
Veröffentlicht 27.03.2024 17:15:51
Zuletzt bearbeitet 31.07.2025 16:56:36
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.

 This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version17.2.1

Cisco ≫ Ios Xe Version17.2.1a

Cisco ≫ Ios Xe Version17.2.1r

Cisco ≫ Ios Xe Version17.2.1v

Cisco ≫ Ios Xe Version17.2.2

Cisco ≫ Ios Xe Version17.2.3

Cisco ≫ Ios Xe Version17.3.1

Cisco ≫ Ios Xe Version17.3.1a

Cisco ≫ Ios Xe Version17.3.1w

Cisco ≫ Ios Xe Version17.3.1x

Cisco ≫ Ios Xe Version17.3.1z

Cisco ≫ Ios Xe Version17.3.2

Cisco ≫ Ios Xe Version17.3.2a

Cisco ≫ Ios Xe Version17.3.3

Cisco ≫ Ios Xe Version17.3.4

Cisco ≫ Ios Xe Version17.3.4a

Cisco ≫ Ios Xe Version17.3.4b

Cisco ≫ Ios Xe Version17.3.4c

Cisco ≫ Ios Xe Version17.3.5

Cisco ≫ Ios Xe Version17.3.5a

Cisco ≫ Ios Xe Version17.3.5b

Cisco ≫ Ios Xe Version17.3.6

Cisco ≫ Ios Xe Version17.3.7

Cisco ≫ Ios Xe Version17.3.8

Cisco ≫ Ios Xe Version17.3.8a

Cisco ≫ Ios Xe Version17.4.1

Cisco ≫ Ios Xe Version17.4.1a

Cisco ≫ Ios Xe Version17.4.1b

Cisco ≫ Ios Xe Version17.4.2

Cisco ≫ Ios Xe Version17.4.2a

Cisco ≫ Ios Xe Version17.5.1

Cisco ≫ Ios Xe Version17.5.1a

Cisco ≫ Ios Xe Version17.6.1

Cisco ≫ Ios Xe Version17.6.1a

Cisco ≫ Ios Xe Version17.6.1w

Cisco ≫ Ios Xe Version17.6.1x

Cisco ≫ Ios Xe Version17.6.1y

Cisco ≫ Ios Xe Version17.6.1z

Cisco ≫ Ios Xe Version17.6.1z1

Cisco ≫ Ios Xe Version17.6.2

Cisco ≫ Ios Xe Version17.6.3

Cisco ≫ Ios Xe Version17.6.3a

Cisco ≫ Ios Xe Version17.6.4

Cisco ≫ Ios Xe Version17.6.5

Cisco ≫ Ios Xe Version17.6.5a

Cisco ≫ Ios Xe Version17.7.1

Cisco ≫ Ios Xe Version17.7.1a

Cisco ≫ Ios Xe Version17.7.1b

Cisco ≫ Ios Xe Version17.7.2

Cisco ≫ Ios Xe Version17.8.1

Cisco ≫ Ios Xe Version17.8.1a

Cisco ≫ Ios Xe Version17.9.1

Cisco ≫ Ios Xe Version17.9.1a

Cisco ≫ Ios Xe Version17.9.1w

Cisco ≫ Ios Xe Version17.9.1x

Cisco ≫ Ios Xe Version17.9.1x1

Cisco ≫ Ios Xe Version17.9.1y

Cisco ≫ Ios Xe Version17.9.1y1

Cisco ≫ Ios Xe Version17.9.2

Cisco ≫ Ios Xe Version17.9.2a

Cisco ≫ Ios Xe Version17.9.3

Cisco ≫ Ios Xe Version17.9.3a

Cisco ≫ Ios Xe Version17.10.1

Cisco ≫ Ios Xe Version17.10.1a

Cisco ≫ Ios Xe Version17.10.1b

Cisco ≫ Ios Xe Version17.11.1

Cisco ≫ Ios Xe Version17.11.1a

Cisco ≫ Ios Xe Version17.11.99sw

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.24

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@cisco.com	7.4	2.8	4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20303

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20303

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20303

EUVD