CVE-2024-20153
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 6, 2025
CWE ID 304
Summary
CVE-2024-20153 represents a vulnerability in wlan STA, where a client can be manipulated into connecting to a rogue AP with a spoofed SSID. This issue poses a risk for remote information disclosure without requiring any additional execution privileges. Notably, user interaction is not required for exploitation. The patch IDs for addressing this issue are ALPS08990446 and ALPS09057442, while the internal identifier is MSV-1598.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.