PT-2013-2997 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2013-05-04 · Atualizado 2013-05-06 · CVE-2013-1235

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) devices (affected versions not specified)

Description The issue is related to the improper handling of terminated TELNET sessions, which can lead to a denial of service (DoS) condition. This is caused by the exhaustion of available Telnet sessions due to improper cleanup of incorrectly terminated remote login sessions. An attacker could exploit this by making many TELNET connections and improperly ending these connections, thereby denying service to new administrator Telnet sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-1235

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 4

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1235 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130506-CVE-2013-1235 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1235 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1235 · Aviso do Fabricante