cisco-sa-ewlc-icmpv6-qb9eYyCR: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-icmpv6-qb9eYyCR
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family | ||
| Cisco Catalyst 9800 Series Routers | ||
| Cisco Catalyst 9000 Family Wireless Controllers |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?
The severity of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR is classified as high.
How do I fix Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?
To remediate Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR, apply the latest security patches provided by Cisco.
Who is affected by Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?
Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR affects devices running Cisco IOS XE Wireless Controller Software for the Catalyst 9800 Series Routers.
What type of attack can exploit Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?
Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR can be exploited by an unauthenticated, adjacent attacker sending ICMPv6 traffic.
What are the implications of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?
The implications of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR include potential disruption of network services and unauthorized access to the affected device.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe wireless controller software for the catalyst 9000 family
- canonical/cisco catalyst 9800 series routers
- canonical/cisco catalyst 9000 family wireless controllers