PT-2010-2331 · Cisco · Cisco Wireless Lan Controller+1

Publicado

2010-09-08

·

Atualizado

2010-09-13

·

CVE-2010-0574

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) software versions 3.2 before 3.2.215.0 Cisco Wireless LAN Controller (WLC) software versions 4.1 and 4.2 before 4.2.205.0 Cisco Wireless LAN Controller (WLC) software versions 4.1M and 4.2M before 4.2.207.54M Cisco Wireless LAN Controller (WLC) software versions 5.0, 5.1, and 6.0 before 6.0.188.0 Cisco Wireless LAN Controller (WLC) software version 5.2 before 5.2.193.11
Description The issue allows remote attackers to cause a denial of service (device reload) via a crafted IKE packet. There are also multiple other vulnerabilities, including denial of service, privilege escalation, and access control list bypass vulnerabilities. These vulnerabilities are independent of one another, and a device may be affected by one vulnerability and not affected by another.
Recommendations For versions 3.2 before 3.2.215.0, update to version 3.2.215.0 or later. For versions 4.1 and 4.2 before 4.2.205.0, update to version 4.2.205.0 or later. For versions 4.1M and 4.2M before 4.2.207.54M, update to version 4.2.207.54M or later. For versions 5.0, 5.1, and 6.0 before 6.0.188.0, update to version 6.0.188.0 or later. For version 5.2 before 5.2.193.11, update to version 5.2.193.11 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2010-0574

Produtos afetados

Cisco Wireless Lan Controller
Cisco Wls