PT-2013-2997 · Cisco · Cisco Wireless Lan Controller+1

Published 2013-05-04 · Updated 2013-05-06 · CVE-2013-1235

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) devices (affected versions not specified)

Description The issue is related to the improper handling of terminated TELNET sessions, which can lead to a denial of service (DoS) condition. This is caused by the exhaustion of available Telnet sessions due to improper cleanup of incorrectly terminated remote login sessions. An attacker could exploit this by making many TELNET connections and improperly ending these connections, thereby denying service to new administrator Telnet sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-1235

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 4

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1235 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130506-CVE-2013-1235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1235 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1235 · Vendor Advisory