CVE-2024-20324: Medium severity cisco ios xe vulnerability

Published Mar 27, 2024

Updated

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the show and show tech wireless CLI commands to access configuration details, including passwords. A successful exploit could allow the attacker to access configuration details that they are not authorized to access.

Affected Software

61 affected components

Cisco IOS XE Software

Cisco IOS XE=16.10.1

Cisco IOS XE=16.10.1e

Cisco IOS XE=16.10.1s

Cisco IOS XE=16.11.1

Cisco IOS XE=16.11.1a

Cisco IOS XE=16.11.1b

Cisco IOS XE=16.11.2

Cisco IOS XE=16.12.1

Cisco IOS XE=16.12.1s

Cisco IOS XE=16.12.1t

Cisco IOS XE=16.12.2s

Cisco IOS XE=16.12.3

Cisco IOS XE=16.12.3s

Cisco IOS XE=16.12.4

Cisco IOS XE=16.12.4a

Cisco IOS XE=16.12.5

Cisco IOS XE=16.12.6

Cisco IOS XE=16.12.6a

Cisco IOS XE=16.12.7

Cisco IOS XE=16.12.8

Cisco IOS XE=17.1.1

Cisco IOS XE=17.1.1s

Cisco IOS XE=17.1.1t

Cisco IOS XE=17.1.3

Cisco IOS XE=17.2.1

Cisco IOS XE=17.2.1a

Cisco IOS XE=17.3.1

Cisco IOS XE=17.3.2

Cisco IOS XE=17.3.2a

Cisco IOS XE=17.3.3

Cisco IOS XE=17.3.4

Cisco IOS XE=17.3.4c

Cisco IOS XE=17.3.5

Cisco IOS XE=17.3.5a

Cisco IOS XE=17.3.5b

Cisco IOS XE=17.3.6

Cisco IOS XE=17.3.7

Cisco IOS XE=17.3.8

Cisco IOS XE=17.3.8a

Cisco IOS XE=17.4.1

Cisco IOS XE=17.5.1

Cisco IOS XE=17.6.1

Cisco IOS XE=17.6.2

Cisco IOS XE=17.6.3

Cisco IOS XE=17.6.4

Cisco IOS XE=17.6.5

Cisco IOS XE=17.6.5a

Cisco IOS XE=17.6.6

Cisco IOS XE=17.6.6a

Cisco IOS XE=17.7.1

Cisco IOS XE=17.8.1

Cisco IOS XE=17.9.1

Cisco IOS XE=17.9.2

Cisco IOS XE=17.9.3

Cisco IOS XE=17.9.4

Cisco IOS XE=17.9.4a

Cisco IOS XE=17.10.1

Cisco IOS XE=17.10.1a

Cisco IOS XE=17.11.1

Cisco IOS XE=17.12.1

Event History

Mar 27, 2024

CVE Published

via MITRE·04:55 PM

Data Sourced

via MITRE·04:55 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-20324?

The severity of CVE-2024-20324 is considered to be low, as it involves authenticated, low-privileged local attackers.

How do I fix CVE-2024-20324?

To fix CVE-2024-20324, ensure that you apply the latest security patches provided by Cisco for IOS XE Software.

Who is affected by CVE-2024-20324?

CVE-2024-20324 affects users of Cisco IOS XE Software with configuration access.

What is the impact of CVE-2024-20324?

The impact of CVE-2024-20324 allows an attacker to access WLAN configuration details, including sensitive information like passwords.

Can CVE-2024-20324 be exploited remotely?

No, CVE-2024-20324 requires local access by an authenticated user to exploit the vulnerability.