HIGH✓ PATCH🇬🇧 English

CVE-2024-20303

CVSS 7.4v3.1pub. 2024-03-27upd. 2025-07-31

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Catalyst 9105axi

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9115axe

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9115axi

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9117axi

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9120axe

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9120axi

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9120axp

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9130axe

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9130axi

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 40

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 80

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 Cl Wireless Controllers For Cloud

    APP
    Cisco
    wszystkie wersje

  • Cisco Catalyst 9800 L

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst Cw9800h1

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst Cw9800h2

    HW
    Cisco
    wszystkie wersje

  • Cisco Catalyst Cw9800m

    HW
    Cisco
    wszystkie wersje

  • Cisco IOS XE

    OS
    Cisco
    17.10.117.10.1a17.10.1b17.11.117.11.1a17.11.99sw17.2.117.2.1a17.2.1r17.2.1v17.2.217.2.317.3.117.3.1a17.3.1w+ 53 więcej
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2023-20198CRITICAL10.0⚠ KEVten sam produkt

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in...

CVE-2018-0151CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software coul...

CVE-2017-3881CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE S...

CVE-2025-20363CRITICAL9.0PL ✓ten sam produkt

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2025-20188CRITICAL10.0PL ✓ten sam produkt

Cisco IOS XE WLC — nieuwierzytelniony upload plików i RCE przez hardcoded JWT