Vulnerability in Cisco Wireless Lan Controller
CVE-2016-6376
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Cisco Wireless_lan_controller — versions 3.0_base, 3.1.59.24, 3.1.105.0
- Cisco Wireless_lan_controller_6.0 — versions 182.0, 188.0, 196.0
- Cisco Wireless_lan_controller_7.0 — versions 98.0, 98.218, 116.0
- Cisco Wireless_lan_controller_7.1 — versions 91.0
- Cisco Wireless_lan_controller_7.2 — versions 103.0
- Cisco Wireless_lan_controller_7.4 — versions 1.19, 1.54, 140.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-6376?
- CVE-2016-6376 is a medium-severity vulnerability in Cisco Wireless Lan Controller, classified under CWE-399. CVSS score: 6.5/10. Published 2016-09-02.
- How severe is CVE-2016-6376?
- Medium severity. CVSS v3 base score is 6.5 out of 10.