CVE-2016-9194

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) Software versions prior to 8.0.140.0 Cisco Wireless LAN Controller (WLC) Software versions prior to 8.2.130.0 Cisco Wireless LAN Controller (WLC) Software versions prior to 8.3.111.0

Description A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The issue is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this by sending malformed 802.11 WME frames to a targeted device, potentially causing the WLC to reload unexpectedly.

Recommendations For versions prior to 8.0.140.0, update to version 8.0.140.0 or later. For versions prior to 8.2.130.0, update to version 8.2.130.0 or later. For versions prior to 8.3.111.0, update to version 8.3.111.0 or later.