CVE-2014-0705

The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.

CVSS v2.0 7.1 HIGH

7.1^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:wireless_lan_controller_software:7.2:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.2.103.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.2.110.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.3:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.3.101.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100.60:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.5:::::::*

cpe:2.3:h:cisco:wireless_lan_controller:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-03-06 11:55

Updated : 2024-02-28 12:20

NVD link : CVE-2014-0705

Mitre link : CVE-2014-0705

CVE.ORG link : CVE-2014-0705

JSON object : View

Products Affected

cisco

wireless_lan_controller
wireless_lan_controller_software

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2014-0705", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-06T11:55:05.380", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233."}, {"lang": "es", "value": "El servicio Multicast Listener Discovery (MLD) en los dispositivos de Cisco Wireless LAN Controller (WLC) 7.2, 7.3, 7.4 anterior a 7.4.121.0 y 7.5, cuando MLDv2 Snooping est\u00e1 habilitado, permite a atacantes remotos causar una denegaci\u00f3n de servicio (reinicio de dispositivo) a trav\u00e9s de un paquete IPv6 MLDv2 malformado, tambi\u00e9n conocido como Bug ID CSCuh74233."}], "lastModified": "2014-03-07T19:08:17.977", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41B7499D-75A9-46A9-9129-BCD18533B21F"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.2.103.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25EECAA5-5D9F-4696-8DFB-6F1C3D5E7984"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.2.110.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D4F9E21-A0AB-4E18-B3E6-13DE2206974C"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9CCF4BD-4C5D-41BB-932C-52B428270B44"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.3.101.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7233C6A0-9674-4C6D-ACC0-CC654CF117C3"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D160CAC1-B873-4A78-A50B-5B3FAB6EEDE3"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.4.100.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D90CC27-03B4-4E8A-B7C7-31CF468CE9B1"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58713067-9185-4B92-97A1-4D98AFF4A8BE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:wireless_lan_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E08C420-97C2-4323-9388-D6C32E83BBF9"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}