Read the docs
TI-2024-13206 Aliases CVE-2024-20271GHSA-ff9x-f52m-hw5m

Improper input validation in Cisco Aironet Access Point Software

Priority MEDIUM 44CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could exploit this vulnerability by sending a crafted IPv4 packet either to or through an affected device. A successful exploit could allow the attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To successfully exploit this vulnerability, the attacker does not need to be associated with the affected AP. This vulnerability cannot be exploited by sending IPv6 packets.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00633 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Aironet Access Point Software8.2.100.0; 8.2.130.0; 8.2.111.0; 8.2.110.0; 8.2.121.0; 8.2.141.0; 8.2.151.0; 8.2.160.0; 8.2.161.0; 8.2.164.0; 8.2.166.0; 8.2.170.0; 8.2.163.0; 8.3.102.0; 8.3.111.0; 8.3.112.0; 8.3.121.0; 8.3.122.0; 8.3.130.0; 8.3.131.0; 8.3.132.0; 8.3.133.0; 8.3.140.0; 8.3.141.0; 8.3.143.0; 8.3.150.0; 8.3.108.0; 8.3.90.53; 8.3.104.46; 8.3.200.200; 8.3.104.64; 8.3.15.165; 8.3.90.11; 8.3.135.0; 8.3.104.14; 8.3.90.36; 8.3.15.142; 8.3.104.37; 8.3.15.117; 8.3.15.120; 8.3.15.25; 8.3.15.158; 8.3.15.118; 8.3.90.25; 8.3.15.169; 8.3.90.58; 8.4.100.0; 8.4.1.199; 8.4.1.91; 8.4.1.142; 8.4.1.175; 8.4.1.218; 8.4.1.92; 8.5.103.0; 8.5.105.0; 8.5.110.0; 8.5.120.0; 8.5.131.0; 8.5.140.0; 8.5.135.0; 8.5.151.0; 8.5.101.0; 8.5.102.0; 8.5.161.0; 8.5.160.0; 8.5.100.0; 8.5.171.0; 8.5.164.0; 8.5.182.0; 8.5.182.11 ME; 8.7.102.0; 8.7.106.0; 8.7.1.16; 8.8.100.0; 8.8.111.0; 8.8.120.0; 8.8.125.0; 8.8.130.0; 8.6.101.0; 8.6.1.84; 8.6.1.70; 8.6.1.71; 8.9.100.0; 8.9.111.0; 8.10.105.0; 8.10.111.0; 8.10.130.0; 8.10.112.0; 8.10.122.0; 8.10.113.0; 8.10.121.0; 8.10.141.0; 8.10.142.0; 8.10.151.0; 8.10.150.0; 8.10.171.0; 8.10.181.0; 8.10.182.0; 8.10.161.0; 8.10.170.0; 8.10.183.0; 8.10.162.0; 8.10.185.0—No fix listedCNA
CiscoCisco Business Wireless Access Point Software10.0.1.0; 10.0.2.0; 10.1.1.0; 10.1.2.0; 10.2.1.0; 10.2.2.0; 10.3.1.0; 10.3.1.1; 10.3.2.0; 1.0.0.13; 1.0.0.16; 1.0.0.3; 1.0.0.39; 1.0.0.4; 1.0.0.5; 1.0.0.7; 1.0.1.2; 1.0.1.3; 1.0.1.4; 1.0.1.5; 1.0.1.6; 1.0.1.7; 1.0.2.0; 1.0.2.13; 1.0.2.14; 1.0.2.15; 1.0.2.16; 1.0.2.17; 1.0.2.2; 1.0.2.8; 1.0.3.1; 1.0.4.4; 1.0.4.3; 1.0.6.6; 1.0.3.4; 1.0.6.8; 1.0.6.2; 1.0.2.3; 1.0.5.3; 1.0.1.10; 1.0.4.2; 1.0.6.5; 1.0.6.7; 1.0.5.0; 1.0.0.10; 1.0.0.12; 1.0.0.14; 1.0.0.15; 1.0.0.17; 1.0.0.9; 1.0.1.11; 1.0.1.12; 1.0.1.9; 1.0.2.6; 1.1.0.5; 1.1.0.7; 1.1.0.9; 1.1.1.0; 1.1.2.4; 1.1.4.6; 1.1.3.2; 1.1.4.0; 1.1.0.3; 1.1.0.4; 1.1.0.6; 1.1.2.3; 10.4.1.0; 10.4.2.0; 10.6.1.0; 10.7.1.0; 10.8.1.0; 1.2.0.2; 1.2.0.3; 1.2.1.3; 1.3.0.3; 1.3.0.4; 1.3.0.6; 1.3.0.7; 10.5.2.0—No fix listedCNA
CiscoCisco Aironet Access Point Software (IOS XE Controller)16.10.1e; 16.10.1; 17.1.1t; 17.1.1s; 17.1.1; 16.11.1a; 16.11.1; 16.11.1c; 16.11.1b; 16.12.1s; 16.12.4; 16.12.1; 16.12.2s; 16.12.1t; 16.12.4a; 16.12.5; 16.12.3; 16.12.6; 16.12.8; 16.12.7; 16.12.6a; 17.3.1; 17.3.2a; 17.3.3; 17.3.4; 17.3.5; 17.3.2; 17.3.4c; 17.3.5a; 17.3.5b; 17.3.6; 17.2.1; 17.2.1a; 17.2.3; 17.2.2; 17.5.1; 17.4.1; 17.4.2; 17.6.1; 17.6.2; 17.6.3; 17.6.4; 17.6.5; 17.10.1; 17.9.1; 17.9.2; 17.9.3; 17.9.4; 17.9.4a; 17.7.1; 17.8.1; 17.11.1; 17.12.1—No fix listedCNA
  • Cisco Aironet Access Point Software VendorCisco Affected 8.2.100.0; 8.2.130.0; 8.2.111.0; 8.2.110.0; 8.2.121.0; 8.2.141.0; 8.2.151.0; 8.2.160.0; 8.2.161.0; 8.2.164.0; 8.2.166.0; 8.2.170.0; 8.2.163.0; 8.3.102.0; 8.3.111.0; 8.3.112.0; 8.3.121.0; 8.3.122.0; 8.3.130.0; 8.3.131.0; 8.3.132.0; 8.3.133.0; 8.3.140.0; 8.3.141.0; 8.3.143.0; 8.3.150.0; 8.3.108.0; 8.3.90.53; 8.3.104.46; 8.3.200.200; 8.3.104.64; 8.3.15.165; 8.3.90.11; 8.3.135.0; 8.3.104.14; 8.3.90.36; 8.3.15.142; 8.3.104.37; 8.3.15.117; 8.3.15.120; 8.3.15.25; 8.3.15.158; 8.3.15.118; 8.3.90.25; 8.3.15.169; 8.3.90.58; 8.4.100.0; 8.4.1.199; 8.4.1.91; 8.4.1.142; 8.4.1.175; 8.4.1.218; 8.4.1.92; 8.5.103.0; 8.5.105.0; 8.5.110.0; 8.5.120.0; 8.5.131.0; 8.5.140.0; 8.5.135.0; 8.5.151.0; 8.5.101.0; 8.5.102.0; 8.5.161.0; 8.5.160.0; 8.5.100.0; 8.5.171.0; 8.5.164.0; 8.5.182.0; 8.5.182.11 ME; 8.7.102.0; 8.7.106.0; 8.7.1.16; 8.8.100.0; 8.8.111.0; 8.8.120.0; 8.8.125.0; 8.8.130.0; 8.6.101.0; 8.6.1.84; 8.6.1.70; 8.6.1.71; 8.9.100.0; 8.9.111.0; 8.10.105.0; 8.10.111.0; 8.10.130.0; 8.10.112.0; 8.10.122.0; 8.10.113.0; 8.10.121.0; 8.10.141.0; 8.10.142.0; 8.10.151.0; 8.10.150.0; 8.10.171.0; 8.10.181.0; 8.10.182.0; 8.10.161.0; 8.10.170.0; 8.10.183.0; 8.10.162.0; 8.10.185.0 Fixed in — No fix listed CNA
  • Cisco Business Wireless Access Point Software VendorCisco Affected 10.0.1.0; 10.0.2.0; 10.1.1.0; 10.1.2.0; 10.2.1.0; 10.2.2.0; 10.3.1.0; 10.3.1.1; 10.3.2.0; 1.0.0.13; 1.0.0.16; 1.0.0.3; 1.0.0.39; 1.0.0.4; 1.0.0.5; 1.0.0.7; 1.0.1.2; 1.0.1.3; 1.0.1.4; 1.0.1.5; 1.0.1.6; 1.0.1.7; 1.0.2.0; 1.0.2.13; 1.0.2.14; 1.0.2.15; 1.0.2.16; 1.0.2.17; 1.0.2.2; 1.0.2.8; 1.0.3.1; 1.0.4.4; 1.0.4.3; 1.0.6.6; 1.0.3.4; 1.0.6.8; 1.0.6.2; 1.0.2.3; 1.0.5.3; 1.0.1.10; 1.0.4.2; 1.0.6.5; 1.0.6.7; 1.0.5.0; 1.0.0.10; 1.0.0.12; 1.0.0.14; 1.0.0.15; 1.0.0.17; 1.0.0.9; 1.0.1.11; 1.0.1.12; 1.0.1.9; 1.0.2.6; 1.1.0.5; 1.1.0.7; 1.1.0.9; 1.1.1.0; 1.1.2.4; 1.1.4.6; 1.1.3.2; 1.1.4.0; 1.1.0.3; 1.1.0.4; 1.1.0.6; 1.1.2.3; 10.4.1.0; 10.4.2.0; 10.6.1.0; 10.7.1.0; 10.8.1.0; 1.2.0.2; 1.2.0.3; 1.2.1.3; 1.3.0.3; 1.3.0.4; 1.3.0.6; 1.3.0.7; 10.5.2.0 Fixed in — No fix listed CNA
  • Cisco Aironet Access Point Software (IOS XE Controller) VendorCisco Affected 16.10.1e; 16.10.1; 17.1.1t; 17.1.1s; 17.1.1; 16.11.1a; 16.11.1; 16.11.1c; 16.11.1b; 16.12.1s; 16.12.4; 16.12.1; 16.12.2s; 16.12.1t; 16.12.4a; 16.12.5; 16.12.3; 16.12.6; 16.12.8; 16.12.7; 16.12.6a; 17.3.1; 17.3.2a; 17.3.3; 17.3.4; 17.3.5; 17.3.2; 17.3.4c; 17.3.5a; 17.3.5b; 17.3.6; 17.2.1; 17.2.1a; 17.2.3; 17.2.2; 17.5.1; 17.4.1; 17.4.2; 17.6.1; 17.6.2; 17.6.3; 17.6.4; 17.6.5; 17.10.1; 17.9.1; 17.9.2; 17.9.3; 17.9.4; 17.9.4a; 17.7.1; 17.8.1; 17.11.1; 17.12.1 Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*before 17.3.8; 17.4 to before 17.6.6; 17.7 to before 17.9.5; 17.10 to before 17.12.2VulnerableCisco
cpe:2.3:a:cisco:business_access_points:*:*:*:*:*:*:*:*before 10.9.1.0VulnerableCisco
cpe:2.3:h:cisco:business_140ac:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_140ac_access_point:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_141acm:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_142acm:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_143acm:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_145ac:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_145ac_access_point:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_240ac:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* Versions before 17.3.8; 17.4 to before 17.6.6; 17.7 to before 17.9.5; 17.10 to before 17.12.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:business_access_points:*:*:*:*:*:*:*:* Versions before 10.9.1.0 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:business_140ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_140ac_access_point:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_141acm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_142acm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_143acm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_145ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_145ac_access_point:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_240ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:business_access_points:*:*:*:*:*:*:*:*before 10.6.2.0VulnerableCisco
cpe:2.3:h:cisco:business_150ax:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_150ax_access_point:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:business_151axm:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*before 8.10.190.0VulnerableCisco
  • cpe:2.3:a:cisco:business_access_points:*:*:*:*:*:*:*:* Versions before 10.6.2.0 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:business_150ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_150ax_access_point:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:business_151axm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:* Versions before 8.10.190.0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-20271
  2. 2026-10-03 Alias added: GHSA-ff9x-f52m-hw5m
  3. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2020-03104 Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2020-03103 Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2020-03096 Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability CVSS 3.1HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences