PT-2016-4734 · Cisco · Cisco Wireless Lan Controller (Wlc)+1

Published 2016-04-20 · Updated 2021-08-19 · CVE-2016-1364

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software versions 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED)

Description The issue is related to the improper handling of Bonjour traffic by the Cisco Wireless LAN Controller (WLC) Software, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This can be achieved by sending crafted Bonjour traffic to the device, resulting in a device reload.

Recommendations For Cisco Wireless LAN Controller (WLC) Software versions 7.4 before 7.4.130.0(MD), update to version 7.4.130.0(MD) or later. For Cisco Wireless LAN Controller (WLC) Software versions 7.5, 7.6, and 8.0 before 8.0.110.0(ED), update to version 8.0.110.0(ED) or later. As a temporary workaround, consider restricting access to the Bonjour task manager until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-1364

Affected Products

Cisco Wireless Lan Controller (Wlc)

Cisco Wls

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1364 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1364 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-bdos · Vendor Advisory
• http://securitytracker.com/id/1035632 · Note
• https://t.me/cvenotify/19736 · Telegram Post