PT-2014-1306 · Cisco · Cisco Wireless Lan Controller+1

Published 2014-03-05 · Updated 2014-03-07 · CVE-2014-0705

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.2, 7.3, 7.4 through 7.4.120.0, and 7.5

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by sending a malformed IPv6 MLDv2 packet when MLDv2 Snooping is enabled.

Recommendations For versions 7.2, 7.3, and 7.4 through 7.4.120.0, update to version 7.4.121.0 or later. For version 7.5, update to a version that includes the fix for this issue. As a temporary workaround, consider disabling the MLDv2 Snooping feature until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-00104

BDU:2015-00105

BDU:2015-00106

BDU:2015-00107

BDU:2015-00188

BDU:2015-00189

CVE-2014-0705

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 11

• https://bdu.fstec.ru/vul/2015-00107 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00189 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00188 · Security Note
• https://bdu.fstec.ru/vul/2015-00104 · Security Note
• https://bdu.fstec.ru/vul/2015-00106 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0705 · Security Note
• https://bdu.fstec.ru/vul/2015-00105 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0705 · Security Note
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuh74233 · Note