PT-2017-12413 · Cisco · Cisco Ios Xe+2

Publicado 2017-09-27 · Atualizado 2019-10-09 · CVE-2017-12222

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1 through 16.3.3

Description A vulnerability in the wireless controller manager could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service (DoS) condition. The issue is due to insufficient input validation, and an attacker could exploit it by submitting a crafted association request to cause the switch to restart. This affects Cisco Catalyst 3650 and 3850 switches running IOS XE Software and acting as wireless LAN controllers (WLC).

Recommendations For Cisco IOS XE versions 16.1 through 16.3.3, update to a fixed version of the software to address the vulnerability.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2017-12222

Produtos afetados

Cisco Catalyst 3650

Cisco Catalyst 3850

Cisco Ios Xe

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ios-xe · Aviso do Fabricante
• http://securitytracker.com/id/1039458 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12222 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-12222 · Aviso do Fabricante
• http://securityfocus.com/bid/101035 · Nota