CVE-2014-0703: Race Condition
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco Wireless LAN Controller (WLC) Aironet IOS softwareto a version that resolves this vulnerability.Fixed in 7.4.110.0Patch CSCuf66202
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0703?
CVE-2014-0703 has been classified with a high severity rating due to the potential for remote attackers to bypass access restrictions.
What devices are affected by CVE-2014-0703?
CVE-2014-0703 affects Cisco Wireless LAN Controller devices running versions prior to 7.4.110.0.
How do I fix CVE-2014-0703?
To fix CVE-2014-0703, upgrade your Cisco Wireless LAN Controller to version 7.4.110.0 or later.
What type of vulnerability is CVE-2014-0703?
CVE-2014-0703 is a race condition vulnerability in the administrative HTTP server of Cisco Wireless LAN Controllers.
Can CVE-2014-0703 be exploited remotely?
Yes, CVE-2014-0703 can be exploited remotely by connecting to an affected Aironet access point.