CVE-2017-3832

published 2017-04-06

CVE-2017-3832: A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a…

Priority P3 43 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
cisco	wireless_lan_controller_firmware	—	—
cisco	wireless_lan_controller_management	—	—
libsndfile_project	libsndfile	>= 0 < 1.0.25-10ubuntu0.16.04.3	1.0.25-10ubuntu0.16.04.3
libsndfile_project	libsndfile	>= 0 < 1.0.25-7ubuntu2.2+esm1	1.0.25-7ubuntu2.2+esm1

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 7.8 HIGH AV:N/AC:L/Au:N/C:N/I:N/A:C

osv 9.8 CRITICAL

vendor_cisco 8.6 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-264 CWE-755