Vulnslist

find the latest Cisco vulnerabilities

Cisco Wireless LAN Controller TSM SNMP Denial of Service Vulnerability

cisco-sa-20160831-wlc-1 · Medium · Published · Updated

A vulnerability in the traffic stream metrics (TSM) implemented with the Inter-Access Point Protocol (IAPP) of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition because the process on the WLC unexpectedly restarts. The DoS condition could occur when a subsequent Simple Network Management Protocol (SNMP) request is received for TSM information. The device reloads when an SNMP request for TSM information is received. An attacker could exploit this vulnerability by sending crafted IAPP packets followed by an SNMP request for TSM information to the targeted device. An exploit could allow the attacker to cause a DoS condition when the WLC unexpectedly restarts. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-1

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2016-6375
Cisco Bug IDsCSCuz40221
CVSS ScoreBase 5.7
Base 5.7 AV:A/AC:M/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C
Product Names From Source
Cisco Wireless LAN Controller (WLC) 4.0.196, Cisco Wireless LAN Controller (WLC) 4.0.108, Cisco Wireless LAN Controller (WLC) 4.0.155.5, Cisco Wireless LAN Controller (WLC) 4.0.179.8, Cisco Wireless LAN Controller (WLC) 4.0.179.11, Cisco Wireless LAN Controller (WLC) 4.0.155.0, Cisco Wireless LAN Controller (WLC) 4.0.206.0, Cisco Wireless LAN Controller (WLC) 4.0.217.0, Cisco Wireless LAN Controller (WLC) 4.0.219.0, Cisco Wireless LAN Controller (WLC) 3.2.78.0, Cisco Wireless LAN Controller (WLC) 3.2.116.21, Cisco Wireless LAN Controller (WLC) 3.2.150.6, Cisco Wireless LAN Controller (WLC) 3.2.150.10, Cisco Wireless LAN Controller (WLC) 3.2.171.5, Cisco Wireless LAN Controller (WLC) 3.2.171.6, Cisco Wireless LAN Controller (WLC) 3.2.185.0, Cisco Wireless LAN Controller (WLC) 3.2.195.10, Cisco Wireless LAN Controller (WLC) 3.2.193.5, Cisco Wireless LAN Controller (WLC) 3.1.105.0, Cisco Wireless LAN Controller (WLC) 3.1.59.24, Cisco Wireless LAN Controller (WLC) 3.1.111.0, Cisco Wireless LAN Controller (WLC) Base, Cisco Wireless LAN Controller (WLC) 4.1.181.0, Cisco Wireless LAN Controller (WLC) 4.1.171.0, Cisco Wireless LAN Controller (WLC) 4.1.185.0, Cisco Wireless LAN Controller (WLC) 4.2.61.0, Cisco Wireless LAN Controller (WLC) 4.2.99.0, Cisco Wireless LAN Controller (WLC) 4.2.112.0, Cisco Wireless LAN Controller (WLC) 4.2.130.0, Cisco Wireless LAN Controller (WLC) 4.2.117.0, Cisco Wireless LAN Controller (WLC) 4.2.173.0, Cisco Wireless LAN Controller (WLC) 4.2.174.0, Cisco Wireless LAN Controller (WLC) 4.2.176.0, Cisco Wireless LAN Controller (WLC) 4.2.182.0, Cisco Wireless LAN Controller (WLC) 5.0.148.0, Cisco Wireless LAN Controller (WLC) 5.0.148.2, Cisco Wireless LAN Controller (WLC) 5.1.151.0, Cisco Wireless LAN Controller (WLC) 5.1.152.0, Cisco Wireless LAN Controller (WLC) 5.1.160.0, Cisco Wireless LAN Controller (WLC) 5.2.157.0, Cisco Wireless LAN Controller (WLC) 5.2.169.0, Cisco Wireless LAN Controller (WLC) 6.0.182.0, Cisco Wireless LAN Controller (WLC) 6.0.188.0, Cisco Wireless LAN Controller (WLC) 6.0.196.0, Cisco Wireless LAN Controller (WLC) 6.0.199.4, Cisco Wireless LAN Controller (WLC) 6.0.202.0, Cisco Wireless LAN Controller (WLC) 7.0.98.0, Cisco Wireless LAN Controller (WLC) 7.0.116.0, Cisco Wireless LAN Controller (WLC) 7.0.98.218, Cisco Wireless LAN Controller (WLC) 7.0.220.0, Cisco Wireless LAN Controller (WLC) 7.0.240.0, Cisco Wireless LAN Controller (WLC) 7.0.250.0, Cisco Wireless LAN Controller (WLC) 7.0.252.0, Cisco Wireless LAN Controller (WLC) 7.1.91.0, Cisco Wireless LAN Controller (WLC) 7.2.103.0, Cisco Wireless LAN Controller (WLC) 7.4.100.0, Cisco Wireless LAN Controller (WLC) 7.4.100.60, Cisco Wireless LAN Controller (WLC) 7.4.110.0, Cisco Wireless LAN Controller (WLC) 7.4.121.0, Cisco Wireless LAN Controller (WLC) 7.4.140.0, Cisco Wireless LAN Controller (WLC) 7.3.101.0, Cisco Wireless LAN Controller (WLC) 7.3.112.0, Cisco Wireless LAN Controller (WLC) 7.3.103.8, Cisco Wireless LAN Controller (WLC) 7.5.102.0, Cisco Wireless LAN Controller (WLC) 7.5.102.11, Cisco Wireless LAN Controller (WLC) 7.6.100.0, Cisco Wireless LAN Controller (WLC) 7.6.120.0, Cisco Wireless LAN Controller (WLC) 7.6.110.0, Cisco Wireless LAN Controller (WLC) 7.6.130.0, Cisco Wireless LAN Controller (WLC) 7.6.1.62, Cisco Wireless LAN Controller (WLC) 8.0.100.0, Cisco Wireless LAN Controller (WLC) 8.0.115.0, Cisco Wireless LAN Controller (WLC) 8.0.120.0, Cisco Wireless LAN Controller (WLC) 8.0.121.0, Cisco Wireless LAN Controller (WLC) 3.6.0E, Cisco Wireless LAN Controller (WLC) 8.1.111.0, Cisco Wireless LAN Controller (WLC) 8.1.122.0, Cisco Wireless LAN Controller (WLC) 8.1.130.0, Cisco Wireless LAN Controller (WLC)

CSAF Product Statuses

Product Status Source CVE Rows
3.1.105.0 known_affected cisco_csaf CVE-2016-6375 1
3.1.111.0 known_affected cisco_csaf CVE-2016-6375 1
3.1.59.24 known_affected cisco_csaf CVE-2016-6375 1
3.2.116.21 known_affected cisco_csaf CVE-2016-6375 1
3.2.150.10 known_affected cisco_csaf CVE-2016-6375 1
3.2.150.6 known_affected cisco_csaf CVE-2016-6375 1
3.2.171.5 known_affected cisco_csaf CVE-2016-6375 1
3.2.171.6 known_affected cisco_csaf CVE-2016-6375 1
3.2.185.0 known_affected cisco_csaf CVE-2016-6375 1
3.2.193.5 known_affected cisco_csaf CVE-2016-6375 1
3.2.195.10 known_affected cisco_csaf CVE-2016-6375 1
3.2.78.0 known_affected cisco_csaf CVE-2016-6375 1

Showing 12 of 78 CSAF status groups; 66 more not shown.

Related Products

Product CVE Evidence
Cisco Wireless LAN Controller (WLC) CVE-2016-6375 Cisco OpenVuln