PT-2017-9990
CVE-2016-9194
·
تاريخ النشر
2017-04-05
·
تاريخ التحديث
2017-07-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cisco Wireless LAN Controller (WLC) Software versions prior to 8.0.140.0
Cisco Wireless LAN Controller (WLC) Software versions prior to 8.2.130.0
Cisco Wireless LAN Controller (WLC) Software versions prior to 8.3.111.0
Description
A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The issue is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this by sending malformed 802.11 WME frames to a targeted device, potentially causing the WLC to reload unexpectedly.
Recommendations
For versions prior to 8.0.140.0, update to version 8.0.140.0 or later.
For versions prior to 8.2.130.0, update to version 8.2.130.0 or later.
For versions prior to 8.3.111.0, update to version 8.3.111.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾