CVE-2015-0723

2015-05-1614:59:01

CWE-399

cisco

web.nvd.nist.gov

cisco

wireless lan controller

wlc

cve-2015-0723

nvd

security

vulnerability

denial of service

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

44.7%

JSON

The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.

Affected configurations

Nvd

Node

ciscowireless_lan_controller_softwareMatch7.5.102.0

ciscowireless_lan_controller_softwareMatch7.5.102.11

ciscowireless_lan_controller_softwareMatch7.6.100.0

VendorProductVersionCPE
ciscowireless_lan_controller_software7.5.102.0cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.0:*:*:*:*:*:*:*
ciscowireless_lan_controller_software7.5.102.11cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.11:*:*:*:*:*:*:*
ciscowireless_lan_controller_software7.6.100.0cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.100.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	wireless_lan_controller_software	7.5.102.0	cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.0:::::::*
cisco	wireless_lan_controller_software	7.5.102.11	cpe:2.3:o:cisco:wireless_lan_controller_software:7.5.102.11:::::::*
cisco	wireless_lan_controller_software	7.6.100.0	cpe:2.3:o:cisco:wireless_lan_controller_software:7.6.100.0:::::::*