CVE-2014-0705: High severity Cisco Wireless LAN Controller Software vulnerability
The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco Wireless LAN Controller (WLC)to a version that resolves this vulnerability.Fixed in 7.4.121.0 - Upgrade
Upgrade
Cisco Wireless LAN Controller (WLC)to a version that resolves this vulnerability.Fixed in 7.5 - Configuration
If immediate upgrade is not possible, disable MLDv2 Snooping to prevent DoS via malformed IPv6 MLDv2 packets (Bug ID CSCuh74233).
Cisco Wireless LAN Controller (WLC) MLDv2 Snooping = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0705?
CVE-2014-0705 has a high severity rating due to its potential for remote denial of service attacks.
How do I fix CVE-2014-0705?
To fix CVE-2014-0705, upgrade your Cisco Wireless LAN Controller software to version 7.4.121.0 or later.
What vulnerability does CVE-2014-0705 exploit?
CVE-2014-0705 exploits a flaw in the multicast listener discovery (MLD) service when MLDv2 Snooping is enabled.
On which Cisco devices does CVE-2014-0705 affect?
CVE-2014-0705 affects Cisco Wireless LAN Controller devices running software versions 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5.
What is the impact of CVE-2014-0705?
The impact of CVE-2014-0705 is a denial of service that can cause the affected Cisco Wireless LAN Controller to restart.