CVE-2015-4215
published 2015-06-24CVE-2015-4215: Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by…
PriorityP425medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
1.04%
60.5th percentile
Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability
vendor_cisco·2015-06-23·CVSS 6.1
CVE-2015-4215 [MEDIUM] CWE-399 Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability
Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability
A vulnerability in Cisco Wireless LAN Controller (WLC) devices could allow an unauthenticated, adjacent attacker could to cause a crash of an affected device.
The vulnerability exists due to an unhandled exception that may occur when IPv6 traffic is forwarded to a device that is not configured for IPv6. An attacker could exploit this vulnerability by sending a certain class of IPv6 traffic to an affected device.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the targeted device. This access requirement reduces the likelihood of a successful exploit.
Cisco indicates through the CVSS scor
GHSA
GHSA-whjp-5gj5-fqm7: Cisco Wireless LAN Controller (WLC) devices with software 7
ghsa_unreviewed·2022-05-13
CVE-2015-4215 [MEDIUM] GHSA-whjp-5gj5-fqm7: Cisco Wireless LAN Controller (WLC) devices with software 7
Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-06-24
Published