6.5
CVE-2016-9194
- EPSS 0.78%
- Veröffentlicht 06.04.2017 18:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginA vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this vulnerability by sending malformed 802.11 WME frames to a targeted device. A successful exploit could allow the attacker to cause the WLC to reload unexpectedly. The fixed versions are 8.0.140.0, 8.2.130.0, and 8.3.111.0. Cisco Bug IDs: CSCva86353.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Wireless Lan Controller Version 5.2.157.0
Cisco ≫ Wireless Lan Controller Version 5.2.169.0
Cisco ≫ Wireless Lan Controller Version 6.0_base
Cisco ≫ Wireless Lan Controller Version 7.0_base
Cisco ≫ Wireless Lan Controller Version 7.1_base
Cisco ≫ Wireless Lan Controller Version 7.2_base
Cisco ≫ Wireless Lan Controller Version 7.3.101.0
Cisco ≫ Wireless Lan Controller Version 7.3.103.8
Cisco ≫ Wireless Lan Controller Version 7.3.112
Cisco ≫ Wireless Lan Controller Version 7.3_base
Cisco ≫ Wireless Lan Controller Version 7.4.1.1
Cisco ≫ Wireless Lan Controller Version 7.4.100
Cisco ≫ Wireless Lan Controller Version 7.4.100.60
Cisco ≫ Wireless Lan Controller Version 7.4.110.0
Cisco ≫ Wireless Lan Controller Version 7.4.121.0
Cisco ≫ Wireless Lan Controller Version 7.4_base
Cisco ≫ Wireless Lan Controller Version 7.5.102.0
Cisco ≫ Wireless Lan Controller Version 7.5.102.11
Cisco ≫ Wireless Lan Controller Version 7.5_base
Cisco ≫ Wireless Lan Controller Version 7.6.1.62
Cisco ≫ Wireless Lan Controller Version 7.6.100.0
Cisco ≫ Wireless Lan Controller Version 7.6.110.0
Cisco ≫ Wireless Lan Controller Version 7.6.120.0
Cisco ≫ Wireless Lan Controller Version 7.6.130.0
Cisco ≫ Wireless Lan Controller Version 8.0.0
Cisco ≫ Wireless Lan Controller Version 8.0.0.30220.385
Cisco ≫ Wireless Lan Controller Version 8.0.72.140
Cisco ≫ Wireless Lan Controller Version 8.0.100
Cisco ≫ Wireless Lan Controller Version 8.0.115.0
Cisco ≫ Wireless Lan Controller Version 8.0.120.0
Cisco ≫ Wireless Lan Controller Version 8.0.121.0
Cisco ≫ Wireless Lan Controller Version 8.1.0
Cisco ≫ Wireless Lan Controller Version 8.1.104.37
Cisco ≫ Wireless Lan Controller Version 8.1.111.0
Cisco ≫ Wireless Lan Controller Version 8.1.122.0
Cisco ≫ Wireless Lan Controller Version 8.1.130.0
Cisco ≫ Wireless Lan Controller 6.0 Version 182.0
Cisco ≫ Wireless Lan Controller 6.0 Version 188.0
Cisco ≫ Wireless Lan Controller 6.0 Version 196.0
Cisco ≫ Wireless Lan Controller 6.0 Version 199.4
Cisco ≫ Wireless Lan Controller 6.0 Version 202.0
Cisco ≫ Wireless Lan Controller 7.0 Version 98.0
Cisco ≫ Wireless Lan Controller 7.0 Version 98.218
Cisco ≫ Wireless Lan Controller 7.0 Version 116.0
Cisco ≫ Wireless Lan Controller 7.0 Version 220.0
Cisco ≫ Wireless Lan Controller 7.0 Version 240.0
Cisco ≫ Wireless Lan Controller 7.0 Version 250.0
Cisco ≫ Wireless Lan Controller 7.0 Version 252.0
Cisco ≫ Wireless Lan Controller 7.1 Version 91.0
Cisco ≫ Wireless Lan Controller 7.2 Version 103.0
Cisco ≫ Wireless Lan Controller 7.4 Version 1.19
Cisco ≫ Wireless Lan Controller 7.4 Version 1.54
Cisco ≫ Wireless Lan Controller 7.4 Version 140.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.78% | 0.511 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 6.1 | 6.5 | 6.9 |
AV:A/AC:L/Au:N/C:N/I:N/A:C
|
http://www.securityfocus.com/bid/97424
http://www.securitytracker.com/id/1038182
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc