Fabian Beck

**Name of the Vulnerable Software and Affected Versions** Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers (affected versions not specified) **Description** The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing. This could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device by sending a malformed CAPWAP packet. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: The issue is due to insufficient error handling in the web UI of Cisco IOS XE Software, allowing an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. An attacker could exploit this by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note that these vulnerabilities do not affect the console connection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: The issue is due to insufficient error handling in the web UI of Cisco IOS XE Software, allowing an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. An attacker could exploit this by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. These vulnerabilities do not affect the console connection. Recommendations: As a temporary workaround, consider disabling the web UI until a patch is available. Restrict access to the web UI to minimize the risk of exploitation. Cisco has released software updates that address these vulnerabilities, it is recommended to apply these updates to resolve the issue. There are no workarounds that address these vulnerabilities.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient HTTP protections in the web UI on an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the web UI to follow a crafted link. A successful exploit could allow the attacker to corrupt memory on the affected device, forcing it to reload and causing a DoS condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers (affected versions not specified) Description: The issue is related to errors in processing input data in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol. This could allow a remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation during CAPWAP packet processing, which can be exploited by sending a crafted CAPWAP packet to an affected device, resulting in a buffer over-read. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Wireless LAN Controller (WLC) Software (affected versions not specified) **Description** The issue is related to insufficient validation of input data in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler. This could allow a remote attacker to cause a denial of service (DoS) condition by sending a specially crafted CAPWAP packet. A successful exploit could result in the affected device restarting, leading to a DoS condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Wireless LAN Controller (WLC) Software (affected versions not specified) **Description** A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted. This issue is due to improper sanitization of user-supplied input in command-line parameters that describe filenames. An attacker could exploit this by using directory traversal techniques to submit a path to a desired file location, potentially allowing them to view system files containing sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.