PT-2013-2878 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2013-01-23 · Atualizado 2017-08-29 · CVE-2013-1105

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) devices versions 7.0 through 7.0.235.3 Cisco Wireless LAN Controller (WLC) devices versions 7.1 through 7.2.111.3 Cisco Wireless LAN Controller (WLC) devices versions 7.3 through 7.3.101.0

Description The issue allows remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request. The Cisco Wireless LAN Controller product family is affected by multiple vulnerabilities, including a SNMP Unauthorized Access Vulnerability.

Recommendations For versions 7.0 through 7.0.235.3, update to version 7.0.235.3 or later. For versions 7.1 through 7.2.111.3, update to version 7.2.111.3 or later. For versions 7.3 through 7.3.101.0, update to version 7.3.101.0 or later. As a temporary workaround, consider restricting access to SNMP requests until a patch is available.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1105

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 9

• http://securitytracker.com/id/1028027 · Nota
• http://osvdb.org/89532 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc · Aviso do Fabricante
• http://secunia.com/advisories/51965 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1105 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81490 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1105 · Nota de Segurança
• http://securityfocus.com/bid/57524 · Nota