CVE-2024-20335 Command injection in Cisco Business Wireless Access Point Software
Authenticated attackers can execute arbitrary code as root on Cisco Small Business Wireless APs via command injection in the web interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-20335?
CVE-2024-20335 is a medium-severity command injection vulnerability in Cisco Business Wireless Access Point Software, published on 6 Mar 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid administrative credentials for the device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system.
Weakness: CWE-78
Which versions are affected by CVE-2024-20335?
It affects 12 products.
Products include Cisco Wap121 Firmware, Cisco Wap125 Firmware, Cisco Wap131 Firmware, Cisco Wap150 Firmware, Cisco Wap320 Firmware, Cisco Wap321 Firmware and 6 more.
How do I fix CVE-2024-20335?
No fix has been published for CVE-2024-20335 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-20335 being exploited?
There is no known exploitation of CVE-2024-20335 in the wild and no public exploit code.
Other vulnerabilities in Cisco Business Wireless Access Point Software
Sources
Also known as GHSA-vhj8-v78c-r8mp.