cisco-sa-sb-wap-multi-85G83CRB

csafUScisco_csaf

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection and Buffer Overflow Vulnerabilities

view advisory published 2024-03-06

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points (APs) could allow an authenticated, remote attacker to perform command injection and buffer overflow attacks against an affected device. In order to exploit these vulnerabilities, the attacker must have valid administrative credentials for the device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. There are no workarounds that address these vulnerabilities.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-20336US——
A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overfl…
CVE-2024-20335US——
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedCisco Business Wireless Access Point Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Business Wireless Access Point Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan