CVE-2016-6376
published 2016-09-02CVE-2016-6376: The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before…
PriorityP426medium6.5CVSS 3.0
AVAACLPRNUINSUCNINAH
EPSS
0.93%
56.3th percentile
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
Affected
96 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
| cisco | wireless_lan_controller | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4hmg-hvqw-h4p9: The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8
ghsa_unreviewed·2022-05-17
CVE-2016-6376 [MEDIUM] GHSA-4hmg-hvqw-h4p9: The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
Cisco
Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
vendor_cisco·2016-08-31·CVSS 6.1
CVE-2016-6376 [MEDIUM] CWE-399 Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
A vulnerability in the Cisco Adaptive Wireless Intrusion Prevention System (wIPS) implementation in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition because the wIPS process on the WLC unexpectedly restarts.
The vulnerability is due to lack of proper input validation of wIPS protocol packets. An attacker could exploit this vulnerability by sending a malformed wIPS packet to the affected device. An exploit could allow the attacker to cause a DoS condition when the wIPS process on the WLC unexpectedly restarts.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
T
Cisco
Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
vendor_cisco
CVE-2016-6376 Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
CVE-2016-6376: Cisco Wireless LAN Controller wIPS Denial of Service Vulnerability
A vulnerability in the Cisco Adaptive Wireless Intrusion Prevention System (wIPS) implementation in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition because the wIPS process on the WLC unexpectedly restarts. The vulnerability is due to lack of proper input validation of wIPS protocol packets. An attacker could exploit this vulnerability by sending a malformed wIPS packet to the affected device. An exploit could allow the attacker to cause a DoS condition when the wIPS process on the WLC unexpectedly restarts. Cisco has released software updates that address this vulnerability. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCu
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2http://www.securityfocus.com/bid/92716http://www.securitytracker.com/id/1036720http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2http://www.securityfocus.com/bid/92716http://www.securitytracker.com/id/1036720
2016-09-02
Published