CVE-2024-20153

Summary

CVE-2024-20153 is a vulnerability affecting wlan STA (Station) in which a client can be manipulated into connecting to a falsely identified AP (Access Point) with a spoofed SSID. This issue results in remote information disclosure, requiring no additional execution privileges. Notably, user interaction is not necessary for an attacker to exploit this vulnerability. The patch IDs for this issue are ALPS08990446 and ALPS09057442, and it is identified as MSV-1598.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.