CVE-2024-20324

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vulnerability is due to improper privilege checks. An attacker could exploit this vulnerability by using the show and show tech wireless CLI commands to access configuration details, including passwords. A successful exploit could allow the attacker to access configuration details that they are not authorized to access.

• CWE-274

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPKVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPKVendor Advisory

Published

Mar 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20319A vulnerability in the UDP forwarding code of Cisco IOS XR S…4.3
• CVE-2024-2032A race condition vulnerability exists in zenml-io/zenml vers…3.1
• CVE-2024-20320A vulnerability in the SSH client feature of Cisco IOS XR So…7.8
• CVE-2024-20321A vulnerability in the External Border Gateway Protocol (eBG…8.6
• CVE-2024-20322A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20323A vulnerability in Cisco Intelligent Node (iNode) Software c…7.5
• CVE-2024-20325A vulnerability in the Live Data server of Cisco Unified Int…7.1
• CVE-2024-20326A vulnerability in the ConfD CLI and the Cisco Crosswork Ne…7.8
• CVE-2024-20327A vulnerability in the PPP over Ethernet (PPPoE) termination…7.4
• CVE-2024-20328A vulnerability in the VirusEvent feature of ClamAV could al…5.3
• CVE-2024-20329A vulnerability in the SSH subsystem of Cisco Adaptive Secur…9.9
• CVE-2024-2033The Video Conferencing with Zoom plugin for WordPress is vul…4.3