Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.105385
Category:CISCO
Title:Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability
Summary:Cisco Wireless LAN Controller contains a vulnerability that could allow an; unauthenticated, adjacent attacker to cause a denial of service condition. Updates are available.
Description:Summary:
Cisco Wireless LAN Controller contains a vulnerability that could allow an
unauthenticated, adjacent attacker to cause a denial of service condition. Updates are available.

Vulnerability Insight:
The vulnerability exists due to improper input sanitization of a certain value
that is supplied by a user prior to successfully authenticating to an affected device. An attacker could exploit this
vulnerability by sending a request designed to trigger the vulnerability and cause a process crash that will trigger a
restart of the device, resulting in a DoS condition.

Vulnerability Impact:
An unauthenticated, adjacent attacker could exploit this vulnerability
to cause a process on an affected device to crash, resulting in a DoS condition.

Affected Software/OS:
Cisco WLC versions 7.5.x or versions prior to 7.6.120 are vulnerable.

Solution:
Updates are available

CVSS Score:
6.1

CVSS Vector:
AV:A/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-0723
Cisco Security Advisory: 20150508 Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=38749
http://www.securitytracker.com/id/1032277
CopyrightCopyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.