CVE-2024-20287

Summary

The CVE-2024-20287 vulnerability affects the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup. An authenticated, remote attacker could exploit this vulnerability by sending crafted HTTP requests to the device's web-based management interface. This could lead to command injection attacks and allow the attacker to execute arbitrary commands with root privileges. To exploit the vulnerability, the attacker would need valid administrative credentials for the device. The base severity of this vulnerability is rated as HIGH, with a score of 7.2 out of 10. It poses a potential danger to organizations as it can result in unauthorized access and control over affected devices. Remediation for this vulnerability would involve applying any available security patches or updates provided by Cisco to address the improper validation of user-supplied input in the affected product's web-based management interface.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.