First published: Sat Mar 28 2015(Updated: )
The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Wireless LAN Controllers | =7.3\(103.8\) | |
Cisco Wireless LAN Controllers | =7.4\(110.0\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0679 is a critical vulnerability that could allow remote attackers to cause a denial of service by triggering a device reload.
To mitigate CVE-2015-0679, update your Cisco Wireless LAN Controller software to a version that is not affected by the vulnerability.
CVE-2015-0679 affects Cisco Wireless LAN Controller versions 7.3(103.8) and 7.4(110.0).
Yes, CVE-2015-0679 can be exploited remotely due to the web-authentication functionality of the affected devices.
Exploitation of CVE-2015-0679 can lead to a complete denial of service, causing the affected device to reload.