Lucene search

CiscoCISCO-SA-20160831-WLC-2

HistoryAug 31, 2016 - 4:00 p.m.

Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability

2016-08-3116:00:00

tools.cisco.com

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

75.1%

JSON

A vulnerability in the Cisco Adaptive Wireless Intrusion Prevention System (wIPS) implementation in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition because the wIPS process on the WLC unexpectedly restarts.

The vulnerability is due to lack of proper input validation of wIPS protocol packets. An attacker could exploit this vulnerability by sending a malformed wIPS packet to the affected device. An exploit could allow the attacker to cause a DoS condition when the wIPS process on the WLC unexpectedly restarts.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2”]

Affected configurations

Vulners

Node

ciscowireless_lan_controller_7.4Match4.0

ciscowireless_lan_controller_7.4Match3.2

ciscowireless_lan_controller_7.4Match3.1

ciscowireless_lan_controller_7.4Match4.1

ciscowireless_lan_controller_7.4Match3.0

ciscowireless_lan_controller_7.4Match4.2

ciscowireless_lan_controller_7.4Match5.0

ciscowireless_lan_controller_7.4Match5.1

ciscowireless_lan_controller_7.4Match5.2

ciscowireless_lan_controller_7.4Match6.0

ciscowireless_lan_controller_7.4Match7.0

ciscowireless_lan_controller_7.4Match7.1

ciscowireless_lan_controller_7.4Match7.2

ciscowireless_lan_controller_7.4Match7.4

ciscowireless_lan_controller_7.4Match7.3

ciscowireless_lan_controller_7.4Match7.5

ciscowireless_lan_controller_7.4Match7.6

ciscowireless_lan_controller_7.4Match8.0

ciscowireless_lan_controller_7.4Match3.6

ciscowireless_lan_controller_7.4Match8.1

ciscowireless_lan_controller_7.4Match4.0.196

ciscowireless_lan_controller_7.4Match4.0.108

ciscowireless_lan_controller_7.4Match4.0.155.5

ciscowireless_lan_controller_7.4Match4.0.179.8

ciscowireless_lan_controller_7.4Match4.0.179.11

ciscowireless_lan_controller_7.4Match4.0.155.0

ciscowireless_lan_controller_7.4Match4.0.206.0

ciscowireless_lan_controller_7.4Match4.0.217.0

ciscowireless_lan_controller_7.4Match4.0.219.0

ciscowireless_lan_controller_7.4Match3.2.78.0

ciscowireless_lan_controller_7.4Match3.2.116.21

ciscowireless_lan_controller_7.4Match3.2.150.6

ciscowireless_lan_controller_7.4Match3.2.150.10

ciscowireless_lan_controller_7.4Match3.2.171.5

ciscowireless_lan_controller_7.4Match3.2.171.6

ciscowireless_lan_controller_7.4Match3.2.185.0

ciscowireless_lan_controller_7.4Match3.2.195.10

ciscowireless_lan_controller_7.4Match3.2.193.5

ciscowireless_lan_controller_7.4Match3.1.105.0

ciscowireless_lan_controller_7.4Match3.1.59.24

ciscowireless_lan_controller_7.4Match3.1.111.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match4.1.181.0

ciscowireless_lan_controller_7.4Match4.1.171.0

ciscowireless_lan_controller_7.4Match4.1.185.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match4.2.61.0

ciscowireless_lan_controller_7.4Match4.2.99.0

ciscowireless_lan_controller_7.4Match4.2.112.0

ciscowireless_lan_controller_7.4Match4.2.130.0

ciscowireless_lan_controller_7.4Match4.2.117.0

ciscowireless_lan_controller_7.4Match4.2.173.0

ciscowireless_lan_controller_7.4Match4.2.174.0

ciscowireless_lan_controller_7.4Match4.2.176.0

ciscowireless_lan_controller_7.4Match4.2.182.0

ciscowireless_lan_controller_7.4Match5.0.148.0

ciscowireless_lan_controller_7.4Match5.0.148.2

ciscowireless_lan_controller_7.4Match5.1.151.0

ciscowireless_lan_controller_7.4Match5.1.152.0

ciscowireless_lan_controller_7.4Match5.1.160.0

ciscowireless_lan_controller_7.4Match5.2.157.0

ciscowireless_lan_controller_7.4Match5.2.169.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match6.0.182.0

ciscowireless_lan_controller_7.4Match6.0.188.0

ciscowireless_lan_controller_7.4Match6.0.196.0

ciscowireless_lan_controller_7.4Match6.0.199.4

ciscowireless_lan_controller_7.4Match6.0.202.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match7.0.98.0

ciscowireless_lan_controller_7.4Match7.0.116.0

ciscowireless_lan_controller_7.4Match7.0.98.218

ciscowireless_lan_controller_7.4Match7.0.220.0

ciscowireless_lan_controller_7.4Match7.0.240.0

ciscowireless_lan_controller_7.4Match7.0.250.0

ciscowireless_lan_controller_7.4Match7.0.252.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match7.1.91.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match7.2.103.0

ciscowireless_lan_controller_7.4Match7.4.100.0

ciscowireless_lan_controller_7.4Match7.4.100.60

ciscowireless_lan_controller_7.4Match7.4.110.0

ciscowireless_lan_controller_7.4Match7.4.121.0

ciscowireless_lan_controller_7.4Match7.4.140.0

ciscowireless_lan_controller_7.4Matchany

ciscowireless_lan_controller_7.4Match7.3.101.0

ciscowireless_lan_controller_7.4Match7.3.112.0

ciscowireless_lan_controller_7.4Match7.3.103.8

ciscowireless_lan_controller_7.4Match7.5.102.0

ciscowireless_lan_controller_7.4Match7.5.102.11

ciscowireless_lan_controller_7.4Match7.6.100.0

ciscowireless_lan_controller_7.4Match7.6.120.0

ciscowireless_lan_controller_7.4Match7.6.110.0

ciscowireless_lan_controller_7.4Match7.6.130.0

ciscowireless_lan_controller_7.4Match7.6.1.62

ciscowireless_lan_controller_7.4Match8.0.100.0

ciscowireless_lan_controller_7.4Match8.0.115.0

ciscowireless_lan_controller_7.4Match8.0.120.0

ciscowireless_lan_controller_7.4Match8.0.121.0

ciscowireless_lan_controller_7.4Match3.6.0e

ciscowireless_lan_controller_7.4Match8.1.111.0

ciscowireless_lan_controller_7.4Match8.1.122.0

ciscowireless_lan_controller_7.4Match8.1.130.0

CPENameOperatorVersion
cisco wireless lan controller (wlc)eq4.0
cisco wireless lan controller (wlc)eq3.2
cisco wireless lan controller (wlc)eq3.1
cisco wireless lan controller (wlc)eq4.1
cisco wireless lan controller (wlc)eq3.0
cisco wireless lan controller (wlc)eq4.2
cisco wireless lan controller (wlc)eq5.0
cisco wireless lan controller (wlc)eq5.1
cisco wireless lan controller (wlc)eq5.2
cisco wireless lan controller (wlc)eq6.0

Name	Operator	Version
cisco wireless lan controller (wlc)	eq	4.0
cisco wireless lan controller (wlc)	eq	3.2
cisco wireless lan controller (wlc)	eq	3.1
cisco wireless lan controller (wlc)	eq	4.1
cisco wireless lan controller (wlc)	eq	3.0
cisco wireless lan controller (wlc)	eq	4.2
cisco wireless lan controller (wlc)	eq	5.0
cisco wireless lan controller (wlc)	eq	5.1
cisco wireless lan controller (wlc)	eq	5.2
cisco wireless lan controller (wlc)	eq	6.0

Rows per page:

1-10 of 1051

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

75.1%

JSON

Related for CISCO-SA-20160831-WLC-2