PT-2014-1307 · Cisco · Cisco Wireless Lan Controller+1

Published 2014-03-05 · Updated 2014-03-07 · CVE-2014-0706

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions 7.2 through 7.2.115.2 Cisco Wireless LAN Controller (WLC) version 7.3 Cisco Wireless LAN Controller (WLC) versions 7.4 through 7.4.110.0

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by using specially crafted 802.11 Ethernet frames.

Recommendations For versions 7.2 through 7.2.115.2, update to version 7.2.115.2 or later. For version 7.3, update to a later version. For versions 7.4 through 7.4.110.0, update to version 7.4.110.0 or later. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-00108

BDU:2015-00109

BDU:2015-00110

BDU:2015-00111

BDU:2015-00112

BDU:2015-00113

CVE-2014-0706

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 11

• https://bdu.fstec.ru/vul/2015-00112 · Security Note
• https://bdu.fstec.ru/vul/2015-00108 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0706 · Security Note
• https://bdu.fstec.ru/vul/2015-00111 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00109 · Security Note
• https://bdu.fstec.ru/vul/2015-00110 · Security Note
• https://bdu.fstec.ru/vul/2015-00113 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0706 · Security Note
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCue87929 · Note