Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection and Buffer Overflow Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless Access Points (APs) could allow an authenticated, remote attacker to perform command injection and buffer overflow attacks against an affected device. In order to exploit these vulnerabilities, the attacker must have valid administrative credentials for the device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. There are no workarounds that address these vulnerabilities.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20336US | — | — | ||
A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overfl… | ||||
| CVE-2024-20335US | — | — | ||
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- CSCwi78254external
- CSCwi78271external
- CSCwi78277external
- CSCwi83948external
- CSCwi83951external
- CSCwi83952external
- CSCwi83953external
Behebungen (2)
- BehobenCisco Business Wireless Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Business Wireless Access Point Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan