PT-2018-2131 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2018-10-17 · Atualizado 2019-10-09 · CVE-2018-15395

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software (affected versions not specified)

Description A vulnerability in the authentication and authorization checking mechanisms could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain, which should be prohibited under normal circumstances. The issue is related to the dynamic assignment of Security Group Tags (SGTs) during a wireless roam from one Service Set Identifier (SSID) to another within the Cisco TrustSec domain. An attacker could exploit this by attempting to acquire an SGT from other SSIDs within the domain, potentially gaining privileged network access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-00083

CVE-2018-15395

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-15395 · Nota de Segurança
• https://cxsecurity.com/cveshow/CVE-2018-15395 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlan-escalation · Aviso do Fabricante
• http://securityfocus.com/bid/105676 · Nota
• https://osv.dev/vulnerability/CVE-2018-15395 · Aviso do Fabricante
• http://securitytracker.com/id/1041925 · Nota
• https://bdu.fstec.ru/vul/2019-00083 · Nota de Segurança