CVE-2024-20418

Summary

CVE-2024-20418 is a vulnerability affecting the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points. An unauthenticated, remote attacker can exploit this issue through crafted HTTP requests, leading to command injection attacks with root privileges on the underlying operating system. This vulnerability arises due to insufficient input validation in the web-interface. Successful exploitation could grant the attacker significant control over the affected device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.