Lucene search

K
ciscoCiscoCISCO-SA-20130506-CVE-2013-1235
HistoryMay 06, 2013 - 7:56 p.m.

Cisco Wireless LAN Controller Telnet Denial of Service Vulnerability

2013-05-0619:56:53
tools.cisco.com
7

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.5%

A vulnerability in Cisco Wireless LAN Controller Software could allow
an unauthenticated, remote attacker to create a denial of service (DoS)
condition for remote login Telnet sessions.

The vulnerability is due to improper cleanup of incorrectly terminated remote login sessions. An exploit could allow an attacker to exhaust available Telnet sessions and deny service to new administrator Telnet sessions.

Cisco has confirmed the vulnerability in a security notice; however, software updates are not available.

Customers are advised to review the bug reports in the “Vendor Announcements” section for a current list of affected versions.

Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Affected configurations

Vulners
Node
ciscowireless_lan_controllerMatch7.0
OR
ciscowireless_lan_controllerMatch7.1
OR
ciscowireless_lan_controllerMatch7.2
OR
ciscowireless_lan_controllerMatch7.3
OR
ciscowireless_lan_controllerMatchany
OR
ciscowireless_lan_controllerMatch7.0.98.0
OR
ciscowireless_lan_controllerMatch7.0.116.0
OR
ciscowireless_lan_controllerMatch7.0.98.218
OR
ciscowireless_lan_controllerMatch7.0.220.0
OR
ciscowireless_lan_controllerMatchany
OR
ciscowireless_lan_controllerMatch7.1.91.0
OR
ciscowireless_lan_controllerMatchany
OR
ciscowireless_lan_controllerMatch7.2.103.0
OR
ciscowireless_lan_controllerMatchany
OR
ciscowireless_lan_controllerMatch7.3.101.0

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

49.5%

Related for CISCO-SA-20130506-CVE-2013-1235