PT-2018-2131 · Cisco · Cisco Wireless Lan Controller+1

Published 2018-10-17 · Updated 2019-10-09 · CVE-2018-15395

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software (affected versions not specified)

Description A vulnerability in the authentication and authorization checking mechanisms could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain, which should be prohibited under normal circumstances. The issue is related to the dynamic assignment of Security Group Tags (SGTs) during a wireless roam from one Service Set Identifier (SSID) to another within the Cisco TrustSec domain. An attacker could exploit this by attempting to acquire an SGT from other SSIDs within the domain, potentially gaining privileged network access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2019-00083

CVE-2018-15395

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-15395 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlan-escalation · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-15395 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00083 · Security Note
• https://cxsecurity.com/cveshow/CVE-2018-15395 · Note
• http://securityfocus.com/bid/105676 · Note
• http://securitytracker.com/id/1041925 · Note