PT-2018-2126 · Cisco · Cisco Wlc+1

Publicado 2018-10-17 · Atualizado 2020-08-28 · CVE-2018-0443

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software (affected versions not specified)

Description A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to improper input validation on fields within CAPWAP Discovery Request packets by the affected device. An attacker could exploit this by sending malicious CAPWAP Discovery Request packets to the Cisco WLC Software, causing associated access points (APs) to disconnect and resulting in a brief period of service unavailability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-399

CWE-20

Identificadores relacionados

BDU:2019-00078

CVE-2018-0443

Produtos afetados

Cisco Wlc

Cisco Wls

Referências · 7

• http://securityfocus.com/bid/105686 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0443 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-dos · Aviso do Fabricante
• http://securitytracker.com/id/1041922 · Nota
• https://bdu.fstec.ru/vul/2019-00078 · Nota de Segurança
• https://cxsecurity.com/cveshow/CVE-2018-0443 · Nota
• https://osv.dev/vulnerability/CVE-2018-0443 · Aviso do Fabricante