CVE-2015-0723
published 2015-05-16CVE-2015-0723: The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a…
PriorityP426medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
0.82%
53.5th percentile
The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability
vendor_cisco·2015-05-08·CVSS 6.1
CVE-2015-0723 [MEDIUM] CWE-399 Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability
Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability
A vulnerability in the wireless web authentication subsystem of Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.
The vulnerability exists due to improper input sanitization of a certain value that is supplied by a user prior to successfully authenticating to an affected device. An attacker could exploit this vulnerability by sending a request designed to trigger the vulnerability and cause a process crash that will trigger a restart of the device, resulting in a DoS condition.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must have access to the same
GHSA
GHSA-q5cq-pgpp-cq8v: The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7
ghsa_unreviewed·2022-05-17
CVE-2015-0723 [MEDIUM] GHSA-q5cq-pgpp-cq8v: The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7
The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-05-16
Published