PT-2014-1306 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2014-03-05 · Atualizado 2014-03-07 · CVE-2014-0705

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.2, 7.3, 7.4 through 7.4.120.0, and 7.5

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by sending a malformed IPv6 MLDv2 packet when MLDv2 Snooping is enabled.

Recommendations For versions 7.2, 7.3, and 7.4 through 7.4.120.0, update to version 7.4.121.0 or later. For version 7.5, update to a version that includes the fix for this issue. As a temporary workaround, consider disabling the MLDv2 Snooping feature until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-00104

BDU:2015-00105

BDU:2015-00106

BDU:2015-00107

BDU:2015-00188

BDU:2015-00189

CVE-2014-0705

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 11

• https://bdu.fstec.ru/vul/2015-00107 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-00189 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-00188 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00104 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00106 · Nota de Segurança
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuh74233 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0705 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00105 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-0705 · Nota de Segurança