PT-2016-6856 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2016-08-31 · Atualizado 2018-10-30 · CVE-2016-6375

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Média

Vetor base

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions 8.0.0 through 8.0.139.0 Cisco Wireless LAN Controller (WLC) versions 8.1.x Cisco Wireless LAN Controller (WLC) versions 8.2.x through 8.2.119.0 Cisco Wireless LAN Controller (WLC) versions 8.3.x through 8.3.101.0

Description A denial of service condition can be caused by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over Simple Network Management Protocol (SNMP). This can cause the device to reload. An unauthenticated, adjacent attacker can exploit this issue by sending crafted IAPP packets followed by an SNMP request for TSM information.

Recommendations For versions 8.0.0 through 8.0.139.0, update to version 8.0.140.0 or later. For versions 8.1.x, update to version 8.2.121.0 or later. For versions 8.2.x through 8.2.119.0, update to version 8.2.121.0 or later. For versions 8.3.x through 8.3.101.0, update to version 8.3.102.0 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-6375

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6375 · Nota de Segurança
• http://securityfocus.com/bid/92712 · Nota
• https://osv.dev/vulnerability/CVE-2016-6375 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-1 · Aviso do Fabricante
• http://securitytracker.com/id/1036721 · Nota