PT-2013-6073 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2013-11-13 · Atualizado 2013-11-14 · CVE-2013-6684

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) (affected versions not specified)

Description The issue is related to the improper validation of configuration parameters in the web framework of Cisco Wireless LAN Controller devices. This allows remote authenticated users to cause a denial of service via a crafted HTTP request. The vulnerability is due to improper input validation of configuration parameters. An attacker could exploit this by sending a crafted HTTP request to the Cisco WLC. The requirement for an attacker to authenticate to the targeted device decreases the likelihood of a successful exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-6684

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 4

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6684 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-6684 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6684 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20131113-CVE-2013-6684 · Aviso do Fabricante