CVE-2024-20287

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Jan 17, 2024
Updated: Feb 2, 2024
CWE ID 88
CWE ID 77

Summary

The CVE-2024-20287 vulnerability affects the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup. An authenticated, remote attacker could exploit this vulnerability by sending crafted HTTP requests to the device's web-based management interface. This could lead to command injection attacks and allow the attacker to execute arbitrary commands with root privileges. To exploit the vulnerability, the attacker would need valid administrative credentials for the device. The base severity of this vulnerability is rated as HIGH, with a score of 7.2 out of 10. It poses a potential danger to organizations as it can result in unauthorized access and control over affected devices. Remediation for this vulnerability would involve applying any available security patches or updates provided by Cisco to address the improper validation of user-supplied input in the affected product's web-based management interface.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20287 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options