CVE-2015-6311
published 2015-10-08CVE-2015-6311: Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device…
PriorityP426medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
0.77%
51.4th percentile
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v3p4-x5x8-8pm8: Cisco Wireless LAN Controller (WLC) devices with software 7
ghsa_unreviewed·2022-05-17
CVE-2015-6311 [MEDIUM] GHSA-v3p4-x5x8-8pm8: Cisco Wireless LAN Controller (WLC) devices with software 7
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.
Cisco
Cisco Wireless LAN Controller Devices 802.11i Management Frame Denial of Service Vulnerability
vendor_cisco·2015-10-02·CVSS 6.1
CVE-2015-6311 [MEDIUM] CWE-399 Cisco Wireless LAN Controller Devices 802.11i Management Frame Denial of Service Vulnerability
Cisco Wireless LAN Controller Devices 802.11i Management Frame Denial of Service Vulnerability
Cisco Wireless LAN Controller (WLC) devices contain a denial of service vulnerability that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.
The vulnerability is due to a failure to properly discard certain malformed values in an 802.11i management frame received from a wireless client. An attacker could trigger the vulnerability by submitting a crafted frame to an access point managed by the affected Cisco WLC.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the targeted device. This access requirement reduces the likelihood of a
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-10-08
Published