Lucene search

K
cveCiscoCVE-2015-6314
HistoryJan 15, 2016 - 3:59 a.m.

CVE-2015-6314

2016-01-1503:59:05
CWE-287
cisco
web.nvd.nist.gov
38
2
cisco
wlc
devices
remote attackers
config change
unspecified vectors
cve-2015-6314
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.3%

Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.

Affected configurations

Nvd
Node
ciscowireless_lan_controller_softwareMatch8.0.72.140
OR
ciscowireless_lan_controller_softwareMatch8.0_base
OR
ciscowireless_lan_controller_softwareMatch8.1.0
OR
ciscowireless_lan_controller_softwareMatch8.1.104.37
OR
ciscowireless_lan_controller_softwareMatch8.1.111.0
OR
ciscowireless_lan_controller_softwareMatch8.1.122.0
VendorProductVersionCPE
ciscowireless_lan_controller_software8.0.72.140cpe:2.3:a:cisco:wireless_lan_controller_software:8.0.72.140:*:*:*:*:*:*:*
ciscowireless_lan_controller_software8.0_basecpe:2.3:a:cisco:wireless_lan_controller_software:8.0_base:*:*:*:*:*:*:*
ciscowireless_lan_controller_software8.1.0cpe:2.3:a:cisco:wireless_lan_controller_software:8.1.0:*:*:*:*:*:*:*
ciscowireless_lan_controller_software8.1.104.37cpe:2.3:a:cisco:wireless_lan_controller_software:8.1.104.37:*:*:*:*:*:*:*
ciscowireless_lan_controller_software8.1.111.0cpe:2.3:a:cisco:wireless_lan_controller_software:8.1.111.0:*:*:*:*:*:*:*
ciscowireless_lan_controller_software8.1.122.0cpe:2.3:a:cisco:wireless_lan_controller_software:8.1.122.0:*:*:*:*:*:*:*

Social References

More

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.004

Percentile

73.3%