CVE-2015-6314

CWE-287 — Improper Authentication4 documents4 sources
Severity
9.8CRITICAL
EPSS
1.1%
top 22.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Wireless LAN Controller Software
Timeline
PublishedJan 15
Latest updateMay 13

Description

Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xg4p-hrwg-fqj6: Cisco Wireless LAN Controller (WLC) devices with software 7↗2022-05-13
▶
CVEList
CVE-2015-6314: Cisco Wireless LAN Controller (WLC) devices with software 7↗2016-01-15
▶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Unauthorized Access Vulnerability↗2016-01-13
▶
CVE-2015-6314 (CRITICAL CVSS 9.8) | Cisco Wireless LAN Controller (WLC) | cvebase.io