CVE-2024-33071
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 7, 2024
Updated: Oct 16, 2024
CWE ID 125
CWE ID 126
Summary
CVE-2024-33071 refers to a Transient Denial of Service (DoS) vulnerability affecting certain wireless LAN controllers. The issue arises when these controllers process the Management Beacon Sieve-element Identifier (MBSSID) Information Element (IE) in beacon frames, specifically when the IE length is zero. The vulnerability does not allow unauthorized access or data exfiltration; instead, it triggers an excessive processing load on the controller, potentially causing it to crash or become unresponsive, resulting in a denial of service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.