CVE-2024-20287

Vulnerability

A command injection vulnerability exists in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup. The issue stems from improper validation of user-supplied input. An authenticated, remote attacker can inject arbitrary commands by sending crafted HTTP requests to the management interface. All versions of the Cisco WAP371 are affected, as the product has entered the end-of-life process and no firmware updates will be released [1].

Exploitation

To exploit this vulnerability, an attacker must have valid administrative credentials for the device. With those credentials, the attacker sends specially crafted HTTP requests to the web-based management interface. The improper input validation allows the attacker to inject operating system commands into the request, which are then executed on the device [1].

Impact

Successful exploitation grants the attacker arbitrary command execution with root privileges on the affected access point. This gives the attacker full control over the device, including the ability to modify configuration, access sensitive data, or use the device as a pivot point for further network attacks [1].

Mitigation

Cisco has not released and will not release firmware updates to address this vulnerability because the Cisco WAP371 Wireless-AC/N AP with Single Point Setup has entered the end-of-life process. No workarounds are available. The only mitigation is to replace the affected device with a supported product [1].