PT-2024-2578 · Cisco · Cisco Ios Xe

Published 2024-03-27 · Updated 2025-07-31 · CVE-2024-20303

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Wireless LAN Controllers (WLCs) (affected versions not specified)

Description A vulnerability in the multicast DNS (mDNS) gateway feature could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This is due to improper management of mDNS client entries. An attacker could exploit this by connecting to the wireless network and sending a continuous stream of specific mDNS packets, causing the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, Cisco has released software updates that address this vulnerability. As a temporary workaround, consider restricting access to the mDNS gateway feature until a patch is available. Avoid using the mDNS gateway feature in the affected Cisco IOS XE Software for Wireless LAN Controllers (WLCs) until the issue is resolved.

DoS

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2024-02634

CVE-2024-20303

Affected Products

Cisco Ios Xe

References · 7

• https://bdu.fstec.ru/vul/2024-02634 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20303 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20303 · Vendor Advisory
• https://t.me/cvenotify/74866 · Telegram Post
• https://twitter.com/CVEnew/status/1773096351125110849 · Twitter Post
• https://t.me/cveNotify/130419 · Telegram Post