CVE-2019-1796

CWE-399CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 65.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Cisco Wireless LAN Controller (wlc)Cisco Wireless LAN ControllerCisco Wireless LAN Controller Software
Timeline
PublishedApr 18
Latest updateMay 13

Description

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC So…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶NVDcisco/wireless_lan_controller_software8.3.143.0 — 8.5.150.0+1
▶CVEListV5cisco/cisco_wireless_lan_controller_(wlc)unspecified — 8.2.170.0+2

🔴Vulnerability Details

2
GHSA
GHSA-qjpc-54v5-5xj3: A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthen↗2022-05-13
▶
CVEList
Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities↗2019-04-18
▶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities↗2019-04-17
▶
CVE-2019-1796 (MEDIUM CVSS 6.5) | A vulnerability in the handling of | cvebase.io