{"id": "CVE-2024-20335", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-20335", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-03-07T14:42:02.782698Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Business Wireless Access Point Software", "versions": [{"status": "affected", "version": "1.0.0.13"}, {"status": "affected", "version": "1.0.0.16"}, {"status": "affected", "version": "1.0.0.3"}, {"status": "affected", "version": "1.0.0.4"}, {"status": "affected", "version": "1.0.0.5"}, {"status": "affected", "version": "1.0.0.7"}, {"status": "affected", "version": "1.0.1.2"}, {"status": "affected", "version": "1.0.1.3"}, {"status": "affected", "version": "1.0.1.5"}, {"status": "affected", "version": "1.0.1.6"}, {"status": "affected", "version": "1.0.1.7"}, {"status": "affected", "version": "1.0.2.0"}, {"status": "affected", "version": "1.0.3.1"}, {"status": "affected", "version": "1.0.4.4"}, {"status": "affected", "version": "1.0.4.3"}, {"status": "affected", "version": "1.0.1.10"}, {"status": "affected", "version": "1.0.5.0"}, {"status": "affected", "version": "1.0.0.10"}, {"status": "affected", "version": "1.0.0.12"}, {"status": "affected", "version": "1.0.0.14"}, {"status": "affected", "version": "1.0.0.15"}, {"status": "affected", "version": "1.0.0.17"}, {"status": "affected", "version": "1.0.0.9"}, {"status": "affected", "version": "1.0.1.11"}, {"status": "affected", "version": "1.0.1.12"}, {"status": "affected", "version": "1.0.1.9"}, {"status": "affected", "version": "1.0.2.6"}, {"status": "affected", "version": "1.1.0.5"}, {"status": "affected", "version": "1.1.0.7"}, {"status": "affected", "version": "1.1.0.9"}, {"status": "affected", "version": "1.1.1.0"}, {"status": "affected", "version": "1.1.2.4"}, {"status": "affected", "version": "1.1.4.6"}, {"status": "affected", "version": "1.1.3.2"}, {"status": "affected", "version": "1.1.4.0"}, {"status": "affected", "version": "1.1.0.3"}, {"status": "affected", "version": "1.1.0.4"}, {"status": "affected", "version": "1.1.0.6"}, {"status": "affected", "version": "1.1.2.3"}, {"status": "affected", "version": "1.2.0.2"}, {"status": "affected", "version": "1.2.0.3"}, {"status": "affected", "version": "1.2.1.3"}, {"status": "affected", "version": "1.3.0.3"}, {"status": "affected", "version": "1.3.0.4"}, {"status": "affected", "version": "1.3.0.6"}, {"status": "affected", "version": "1.3.0.7"}]}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.13:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.14:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.15:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.17:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.10:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.11:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.12:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.5:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.6:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.7:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.1.9:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.0.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.1.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.2.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:cisco:business_wireless_access_point_software:1.3.0.7:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "business_wireless_access_point_software", "versions": [{"status": "affected", "version": "1.0.0.10"}, {"status": "affected", "version": "1.0.0.12"}, {"status": "affected", "version": "1.0.0.13"}, {"status": "affected", "version": "1.0.0.14"}, {"status": "affected", "version": "1.0.0.15"}, {"status": "affected", "version": "1.0.0.16"}, {"status": "affected", "version": "1.0.0.17"}, {"status": "affected", "version": "1.0.0.3"}, {"status": "affected", "version": "1.0.0.4"}, {"status": "affected", "version": "1.0.0.5"}, {"status": "affected", "version": "1.0.0.7"}, {"status": "affected", "version": "1.0.0.9"}, {"status": "affected", "version": "1.0.1.10"}, {"status": "affected", "version": "1.0.1.11"}, {"status": "affected", "version": "1.0.1.12"}, {"status": "affected", "version": "1.0.1.2"}, {"status": "affected", "version": "1.0.1.3"}, {"status": "affected", "version": "1.0.1.5"}, {"status": "affected", "version": "1.0.1.6"}, {"status": "affected", "version": "1.0.1.7"}, {"status": "affected", "version": "1.0.1.9"}, {"status": "affected", "version": "1.0.2.0"}, {"status": "affected", "version": "1.0.2.6"}, {"status": "affected", "version": "1.0.3.1"}, {"status": "affected", "version": "1.0.4.3"}, {"status": "affected", "version": "1.0.4.4"}, {"status": "affected", "version": "1.0.5.0"}, {"status": "affected", "version": "1.1.0.3"}, {"status": "affected", "version": "1.1.0.4"}, {"status": "affected", "version": "1.1.0.5"}, {"status": "affected", "version": "1.1.0.6"}, {"status": "affected", "version": "1.1.0.7"}, {"status": "affected", "version": "1.1.0.9"}, {"status": "affected", "version": "1.1.1.0"}, {"status": "affected", "version": "1.1.2.3"}, {"status": "affected", "version": "1.1.2.4"}, {"status": "affected", "version": "1.1.3.2"}, {"status": "affected", "version": "1.1.4.0"}, {"status": "affected", "version": "1.1.4.6"}, {"status": "affected", "version": "1.2.0.2"}, {"status": "affected", "version": "1.2.0.3"}, {"status": "affected", "version": "1.2.1.3"}, {"status": "affected", "version": "1.3.0.3"}, {"status": "affected", "version": "1.3.0.4"}, {"status": "affected", "version": "1.3.0.6"}, {"status": "affected", "version": "1.3.0.7"}], "defaultStatus": "unknown"}]}], "published": "2024-03-06T17:15:09.193", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-85G83CRB", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-85G83CRB", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks against an affected device. In order to exploit this vulnerability, the attacker must have valid administrative credentials for the device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de los AP inal\u00e1mbricos Cisco Small Business series 100, 300 y 500 podr\u00eda permitir que un atacante remoto autenticado realice ataques de inyecci\u00f3n de comandos contra un dispositivo afectado. Para aprovechar esta vulnerabilidad, el atacante debe tener credenciales administrativas v\u00e1lidas para el dispositivo. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a la interfaz de administraci\u00f3n basada en web de un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo arbitrario como usuario root en el sistema operativo subyacente."}], "lastModified": "2026-06-17T07:06:30.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap121_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05B0A08F-0239-431A-8DF1-93E06BAB7C55"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap121:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "043F8C0E-6BE1-4A53-AEB6-4456A19B1E95"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap125_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED3BDC9A-EAA4-44C1-AA4F-797022D65338"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EECA8468-5D7D-46DD-A967-E7EDA5FE8D4C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap131_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D72E6F29-4C06-472E-BD5F-476A95698F95"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5B3B7126-28E1-42F8-98CF-0EC156BE68D7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap150_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4320886F-32B4-4BE2-B869-4E712F9997B1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CAB01CB7-C5BB-49D6-85A7-CECED514C7CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap320_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78697CBA-2C3E-4AFD-B341-0E0AA2125826"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap320:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "44AED876-02D6-4BDC-B529-05F8818E735D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap321_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58A95C5B-FDF7-4DA8-94B2-43C54896C509"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "935A39DF-ABFC-4EAB-AE7C-5AB4D41DC0BD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap351_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DCC1A91-99EA-4F1D-B96F-51709CCEB853"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C9917176-E908-4110-A641-FED1DFF41C43"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap361_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A209F4DE-4952-4E05-99AA-77D8C33BF8A5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "49477A11-78C3-4EEA-899E-5E4623D38068"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap571_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B5D4988-EC77-41F7-9BEC-22169C5357C2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap571:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32F4716E-9297-4235-A1FB-C236D22BF391"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap371_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB66B375-83A4-48BB-9192-E5773A3FFF34"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap371:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "48E73984-A9F5-42C5-8EF0-C9FC8A632A1A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap571e_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89D6214C-EC44-4E8F-91BD-3EF41B616FEF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap571e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "35BB4B47-8C65-4E86-8997-F387FFE8455C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wap581_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7587F87-6EF1-4386-968F-932E7C7639DA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wap581:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C857E391-3C62-4F37-BD86-7184F79B89B7"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@cisco.com"}
