CVE-2016-1364

CWE-20 — Improper Input ValidationCWE-3994 documents4 sources
Severity
7.5HIGH
EPSS
0.5%
top 32.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Wireless LAN Controller Software
Timeline
PublishedApr 21
Latest updateMay 13

Description

Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-8f34-h6m3-5298: Cisco Wireless LAN Controller (WLC) Software 7↗2022-05-13
▶
CVEList
CVE-2016-1364: Cisco Wireless LAN Controller (WLC) Software 7↗2016-04-21
▶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Denial of Service Vulnerability↗2016-04-20
▶
CVE-2016-1364 (HIGH CVSS 7.5) | Cisco Wireless LAN Controller (WLC) | cvebase.io