cisco-sa-iosxe-wlc-privesc-RjSMrmPK: Cisco IOS XE Software for Wireless LAN Controllers Privilege Escalation Vulnerability

Published Mar 27, 2024

Updated

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords.This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the

Affected Software

1 affected component

Cisco IOS XE Software

Event History

Mar 27, 2024

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-20324

Frequently Asked Questions

What is the severity of CVE-2023-20274?

The severity of CVE-2023-20274 is classified as high due to the potential for privilege escalation.

How do I fix CVE-2023-20274?

To fix CVE-2023-20274, update the Cisco IOS XE Software to the latest version as recommended by Cisco.

Who is affected by CVE-2023-20274?

CVE-2023-20274 affects authenticated users with low privileges on Cisco IOS XE Software.

What are the potential consequences of exploiting CVE-2023-20274?

Exploiting CVE-2023-20274 could allow attackers to access sensitive WLAN configuration details, including passwords.

What type of attack vector is involved in CVE-2023-20274?

CVE-2023-20274 can be exploited through the command-line interface (CLI) of Cisco IOS XE Software.