Medium severity · published Sep 2, 2016
CVE-2016-6376
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x…
6.5
CVSS
0.9%
EPSS
No
On KEV
Description
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
Wireless Lan Controller · Cisco
3.0_base; 3.1.59.24; 3.1.105.0; 3.1.111.0; 3.2.78.0; 3.2.116.21; +34 more · source: NVD
WL
Wireless Lan Controller 6.0 · Cisco
182.0; 188.0; 196.0; 199.4; 202.0 · source: NVD
WL
Wireless Lan Controller 7.0 · Cisco
98.0; 98.218; 116.0; 220.0; 240.0; 250.0; +1 more · source: NVD
WL
Wireless Lan Controller 7.1 · Cisco
91.0 · source: NVD
WL
Wireless Lan Controller 7.2 · Cisco
103.0 · source: NVD
WL
Wireless Lan Controller 7.4 · Cisco
1.19; 1.54; 140.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6376
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6376
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-wlc-2
www.securityfocus.com
http://www.securityfocus.com/bid/92716
www.securitytracker.com
http://www.securitytracker.com/id/1036720
More from Wireless Lan Controller
8.6
CVE-2020-3560
A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device
8.6
CVE-2020-3559
A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload
7.8
CVE-2018-0417
A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the…
7.4
CVE-2020-3552
A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)…
6.5
CVE-2019-1800
A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to…