PT-2015-3188 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2015-06-23 · Atualizado 2021-04-16 · CVE-2015-4215

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.5(102.0) through 7.6(1.62)

Description The issue is related to errors in resource management, allowing remote attackers to cause a denial of service by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device. An unauthenticated, adjacent attacker could exploit this by sending a certain class of IPv6 traffic to an affected device, causing it to crash. The attacker must be on the same broadcast or collision domain as the targeted device.

Recommendations For versions 7.5(102.0) and 7.6(1.62), update to a newer version that includes the fix for this issue, as software updates have been released by Cisco. As a temporary workaround, consider restricting IPv6 traffic to devices that are configured for IPv6 to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2016-00558

CVE-2015-4215

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 7

• https://bdu.fstec.ru/vul/2016-00558 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4215 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39472 · Aviso do Fabricante
• http://securitytracker.com/id/1032697 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4215 · Nota de Segurança
• http://securityfocus.com/bid/75369 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-4215 · Nota de Segurança