PT-2015-3188 · Cisco · Cisco Wireless Lan Controller+1

Published 2015-06-23 · Updated 2021-04-16 · CVE-2015-4215

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.5(102.0) through 7.6(1.62)

Description The issue is related to errors in resource management, allowing remote attackers to cause a denial of service by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device. An unauthenticated, adjacent attacker could exploit this by sending a certain class of IPv6 traffic to an affected device, causing it to crash. The attacker must be on the same broadcast or collision domain as the targeted device.

Recommendations For versions 7.5(102.0) and 7.6(1.62), update to a newer version that includes the fix for this issue, as software updates have been released by Cisco. As a temporary workaround, consider restricting IPv6 traffic to devices that are configured for IPv6 to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2016-00558

CVE-2015-4215

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 7

• https://bdu.fstec.ru/vul/2016-00558 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150623-CVE-2015-4215 · Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39472 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4215 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-4215 · Security Note
• http://securitytracker.com/id/1032697 · Note
• http://securityfocus.com/bid/75369 · Note