CVE-2015-6302 — Cisco Wireless LAN Controller Software vulnerability

CWE-3994 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 36.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Wireless LAN Controller Software
Timeline
PublishedSep 26
Latest updateMay 17

Description

The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0) and 7.0(252.0) allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

â–¶NVDcisco/wireless_lan_controller_software7.0.250.0, 7.0.252.0+1

🔴Vulnerability Details

2
GHSA
GHSA-qvqv-h7xg-x5cc: The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7↗2022-05-17
â–¶
CVEList
CVE-2015-6302: The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7↗2015-09-25
â–¶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller RADIUS Packet of Disconnect Vulnerability↗2015-09-21
â–¶
CVE-2015-6302 — Cisco vulnerability | cvebase