CVE-2024-20324

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the show and show tech wireless CLI commands to access configuration details, including passwords. A successful exploit could allow the attacker to access configuration details that they are not authorized to access.

Scoring

Severity

MEDIUM

CVSS base score

5.5

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.15%

CWE

CWE-274

Published

2024-03-27

Last modified

2026-03-13

Affected products

• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software
• Cisco Cisco IOS XE Software

Weakness type

• CWE-274

Related vulnerabilities

• CVE-2026-62764 — Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
• CVE-2025-54511 — Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an...
• CVE-2026-33005 — Apache OpenMeetings: Insufficient checks in FileWebService
• CVE-2025-62175 — Mastodon streaming API fails to disconnect disabled and suspended users
• CVE-2023-20516 — Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to...
• CVE-2025-20177 — Cisco IOS XR Software Image Verification Bypass Vulnerability
• CVE-2024-46974 — GPU DDK - Arbitrary write of read-only dmabuf
• CVE-2025-20156 — Cisco Meeting Management Client-Server Privilege Escalation Vulnerability

Markdown version · Browse all CVEs