PT-2016-1107 · Cisco · Cisco Wireless Lan Controller+1

Published 2016-01-13 · Updated 2021-04-16 · CVE-2015-6314

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.6.x through 8.0 before 8.0.121.0 Cisco Wireless LAN Controller versions 8.1 before 8.1.131.0

Description The issue is related to weaknesses in the authentication procedure of the Cisco wireless LAN controller software. It may allow a remote attacker to modify configuration settings. An unauthenticated, remote attacker could exploit this issue to change the configuration of the device, potentially compromising it completely.

Recommendations For Cisco Wireless LAN Controller versions 7.6.x through 8.0 before 8.0.121.0, upgrade to version 8.0.121.0 or later. For Cisco Wireless LAN Controller versions 8.1 before 8.1.131.0, upgrade to version 8.1.131.0 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2016-00301

CVE-2015-6314

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-wlc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6314 · Security Note
• https://bdu.fstec.ru/vul/2016-00301 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-wlc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6314 · Security Note
• http://securitytracker.com/id/1034665 · Note