PT-2016-4734 · Cisco · Cisco Wireless Lan Controller (Wlc)+1

Publicado 2016-04-20 · Atualizado 2021-08-19 · CVE-2016-1364

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software versions 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED)

Description The issue is related to the improper handling of Bonjour traffic by the Cisco Wireless LAN Controller (WLC) Software, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This can be achieved by sending crafted Bonjour traffic to the device, resulting in a device reload.

Recommendations For Cisco Wireless LAN Controller (WLC) Software versions 7.4 before 7.4.130.0(MD), update to version 7.4.130.0(MD) or later. For Cisco Wireless LAN Controller (WLC) Software versions 7.5, 7.6, and 8.0 before 8.0.110.0(ED), update to version 8.0.110.0(ED) or later. As a temporary workaround, consider restricting access to the Bonjour task manager until a patch is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-1364

Produtos afetados

Cisco Wireless Lan Controller (Wlc)

Cisco Wls

Referências · 5

• http://securitytracker.com/id/1035632 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1364 · Nota de Segurança
• https://t.me/cvenotify/19736 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2016-1364 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos · Aviso do Fabricante