ID CVE-2016-9195
Summary A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition by disconnecting a single connection. This vulnerability affects Cisco Wireless LAN Controller running software release 8.3.102.0. More Information: CSCvb01835. Known Fixed Releases: 8.4(1.49) 8.3(111.0) 8.3(108.0) 8.3(104.24) 8.3(102.3).
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:wireless_lan_controller:8.3.102.0:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:wireless_lan_controller:8.3.102.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 12-07-2017 - 01:29)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 97425
confirm https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc1
sectrack 1038188
Last major update 12-07-2017 - 01:29
Published 07-04-2017 - 17:59
Last modified 12-07-2017 - 01:29
Back to Top