PT-2016-6856 · Cisco · Cisco Wireless Lan Controller+1

Published 2016-08-31 · Updated 2018-10-30 · CVE-2016-6375

Positive Technologies (AI Summary)

CVSS v2.0

5.7

Medium

Base vector

AV:A/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions 8.0.0 through 8.0.139.0 Cisco Wireless LAN Controller (WLC) versions 8.1.x Cisco Wireless LAN Controller (WLC) versions 8.2.x through 8.2.119.0 Cisco Wireless LAN Controller (WLC) versions 8.3.x through 8.3.101.0

Description A denial of service condition can be caused by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over Simple Network Management Protocol (SNMP). This can cause the device to reload. An unauthenticated, adjacent attacker can exploit this issue by sending crafted IAPP packets followed by an SNMP request for TSM information.

Recommendations For versions 8.0.0 through 8.0.139.0, update to version 8.0.140.0 or later. For versions 8.1.x, update to version 8.2.121.0 or later. For versions 8.2.x through 8.2.119.0, update to version 8.2.121.0 or later. For versions 8.3.x through 8.3.101.0, update to version 8.3.102.0 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-6375

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6375 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6375 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-1 · Vendor Advisory
• http://securityfocus.com/bid/92712 · Note
• http://securitytracker.com/id/1036721 · Note