Cisco WAP371 Firmware vulnerabilities

5 CVEs affecting Cisco WAP371 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20336, published 2024-03-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20287, published 2024-01-17. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup could allow an authenticated, remote attacker to perform…
CVE-2024-20335, published 2024-03-06. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform command injection attacks…
CVE-2024-20336, published 2024-03-06. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could allow an authenticated, remote attacker to perform buffer overflow attacks against…
CVE-2018-0415, published 2018-08-15. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300…
CVE-2018-0412, published 2018-08-15. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300…