CVE-2016-1460
published 2016-07-28CVE-2016-1460: Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management…
PriorityP424medium6.5CVSS 3.0
AVAACLPRNUINSUCNINAH
EPSS
0.74%
50.8th percentile
Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4hcg-ggr3-r72m: Cisco Wireless LAN Controller (WLC) devices 7
ghsa_unreviewed·2022-05-17
CVE-2016-1460 [MEDIUM] GHSA-4hcg-ggr3-r72m: Cisco Wireless LAN Controller (WLC) devices 7
Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979.
Cisco
Cisco Wireless LAN Controller Denial of Service Vulnerability
vendor_cisco·2016-07-27·CVSS 6.1
CVE-2016-1460 [MEDIUM] CWE-399 Cisco Wireless LAN Controller Denial of Service Vulnerability
Cisco Wireless LAN Controller Denial of Service Vulnerability
A vulnerability in wireless frame management service of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device.
The vulnerability is due to insufficient handling of wireless management frames. An attacker could exploit this vulnerability by sending crafted wireless management frames to the device.
Cisco has not released software updates that address this vulnerability. Workarounds that address this vulnerability are not available.
This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlc
Cisco
Cisco Wireless LAN Controller Denial of Service Vulnerability
vendor_cisco
CVE-2016-1460 Cisco Wireless LAN Controller Denial of Service Vulnerability
CVE-2016-1460: Cisco Wireless LAN Controller Denial of Service Vulnerability
A vulnerability in wireless frame management service of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to insufficient handling of wireless management frames. An attacker could exploit this vulnerability by sending crafted wireless management frames to the device. Cisco has not released software updates that address this vulnerability.
CWE: CWE-399, CWE-399
Bug IDs: CSCun92979
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlchttp://www.securityfocus.com/bid/92158http://www.securitytracker.com/id/1036468http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160727-wlchttp://www.securityfocus.com/bid/92158http://www.securitytracker.com/id/1036468
2016-07-28
Published