PT-2017-12452 · Cisco · Cisco Wireless Lan Controllers+1

Publicado 2017-11-01 · Atualizado 2019-10-09 · CVE-2017-12278

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controllers (affected versions not specified)

Description A memory leak in the Simple Network Management Protocol (SNMP) subsystem could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service (DoS) condition. This occurs when an attacker repeatedly polls certain MIB object IDs (OIDs) using the SNMP Version 2 SNMP Read string or valid SNMP Version 3 credentials, consuming available memory on the device.

Recommendations For all affected versions, update to the latest software version that addresses this issue, as released by Cisco. At the moment, there is no information about specific versions that contain a fix for this vulnerability.

Correção

DoS

Buffer Overflow

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-119

CWE-772

Identificadores relacionados

CVE-2017-12278

Produtos afetados

Cisco Wireless Lan Controllers

Cisco Wls

Referências · 6

• http://securitytracker.com/id/1039712 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc1 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-wlc1 · Aviso do Fabricante
• http://securityfocus.com/bid/101642 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12278 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12278 · Nota de Segurança