PT-2017-9997 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2017-04-05 · Atualizado 2021-04-16 · CVE-2016-9219

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions 8.2.121.0 through 8.3.102.0

Description A vulnerability in IPv6 UDP ingress packet processing could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The issue is due to incomplete IPv6 UDP header validation. An attacker could exploit this by sending a crafted IPv6 UDP packet to a specific port on the targeted device, impacting the device's availability.

Recommendations For version 8.2.121.0, update to a fixed software version. For version 8.3.102.0, update to a fixed software version. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-9219

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-9219 · Nota de Segurança
• http://securitytracker.com/id/1038183 · Nota
• https://osv.dev/vulnerability/CVE-2016-9219 · Aviso do Fabricante
• http://securityfocus.com/bid/97423 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc2 · Aviso do Fabricante