PT-2010-2331 · Cisco · Cisco Wireless Lan Controller+1
Published
2010-09-08
·
Updated
2010-09-13
·
CVE-2010-0574
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Wireless LAN Controller (WLC) software versions 3.2 before 3.2.215.0
Cisco Wireless LAN Controller (WLC) software versions 4.1 and 4.2 before 4.2.205.0
Cisco Wireless LAN Controller (WLC) software versions 4.1M and 4.2M before 4.2.207.54M
Cisco Wireless LAN Controller (WLC) software versions 5.0, 5.1, and 6.0 before 6.0.188.0
Cisco Wireless LAN Controller (WLC) software version 5.2 before 5.2.193.11
Description
The issue allows remote attackers to cause a denial of service (device reload) via a crafted IKE packet. There are also multiple other vulnerabilities, including denial of service, privilege escalation, and access control list bypass vulnerabilities. These vulnerabilities are independent of one another, and a device may be affected by one vulnerability and not affected by another.
Recommendations
For versions 3.2 before 3.2.215.0, update to version 3.2.215.0 or later.
For versions 4.1 and 4.2 before 4.2.205.0, update to version 4.2.205.0 or later.
For versions 4.1M and 4.2M before 4.2.207.54M, update to version 4.2.207.54M or later.
For versions 5.0, 5.1, and 6.0 before 6.0.188.0, update to version 6.0.188.0 or later.
For version 5.2 before 5.2.193.11, update to version 5.2.193.11 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cisco Wireless Lan Controller
Cisco Wls