CVE-2024-20324Medium· 5.5▾ SunlitA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attack…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords.
This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the show and show tech wireless CLI commands to access configuration details, including passwords. A successful exploit could allow the attacker to access configuration details that they are not authorized to access.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is part of the March 2024 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75056"].
Cisco IOS XE Software for Wireless LAN Controllers Privilege Escalation Vulnerability. Released 2024-03-27.
Affected:
Cisco has released software updates that address this vulnerability. https://software.cisco.com
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-1451High· 8.1Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution
CVE-2019-1750High· 7.4Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability (CVE-2019-1750)
CVE-2025-20162High· 8.6Cisco IOS XE DHCP Snooping Denial of Service Vulnerability
CVE-2024-20436High· 8.6Cisco IOS and IOS XE Software WebUI Denial of Service Vulnerability
CVE-2024-20434Medium· 4.3Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability (CVE-2024-20434)
CVE-2025-20239High· 8.6Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnera…