CVE-2014-0705
published 2014-03-06CVE-2014-0705: The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is…
PriorityP431high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.69%
74.7th percentile
The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controllers | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco·2014-03-06·CVSS 10.0
CVE-2014-0701 [CRITICAL] CWE-20 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (WLC) product family is affected by the following vulnerabilities:
Cisco Wireless LAN Controller Denial of Service Vulnerability
Cisco Wireless LAN Controller Unauthorized Access to Associated Access Points Vulnerability
Cisco Wireless LAN Controller IGMP Version 3 Denial of Service Vulnerability
Cisco Wireless LAN Controller MLDv2 Denial of Service Vulnerability
Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability
Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability
Cisco has released software updates that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoS
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco
CVE-2014-0705 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
CVE-2014-0705: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (WLC) product family is affected by the following vulnerabilities: Cisco Wireless LAN Controller Denial of Service Vulnerability Cisco Wireless LAN Controller Unauthorized Access to Associated Access Points Vulnerability Cisco Wireless LAN Controller IGMP Version 3 Denial of Service Vulnerability Cisco Wireless LAN Controller MLDv2 Denial of Service Vulnerability Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/cont
VulDB
Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0 MLDv2 Packet resource management (cisco-sa-20140305-wlc / Nessus ID 73018)
vuldb·2026-05-07·CVSS 7.1
CVE-2014-0705 [HIGH] Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0 MLDv2 Packet resource management (cisco-sa-20140305-wlc / Nessus ID 73018)
A vulnerability identified as problematic has been detected in Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0. Affected by this issue is some unknown functionality of the component MLDv2 Packet Handler. The manipulation leads to improper resource management.
This vulnerability is uniquely identified as CVE-2014-0705. The attack is possible to be carried out remotely. No exploit exists.
You should upgrade the affected component.
GHSA
GHSA-wc39-prpx-832g: The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7
ghsa_unreviewed·2022-05-17
CVE-2014-0705 [HIGH] GHSA-wc39-prpx-832g: The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7
The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-06
Published