CVE-2016-9219 Denial of service in Cisco Wireless LAN Controller
An unauthenticated remote attacker can cause a Cisco Wireless LAN Controller to unexpectedly reload by sending a crafted IPv6 UDP packet.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9219?
CVE-2016-9219 is a high-severity denial of service vulnerability in Cisco Wireless Lan Controller Software, published on 6 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending a crafted IPv6 UDP packet to a specific port on the targeted device. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This vulnerability affects Cisco Wireless LAN Controller (WLC) running software version 8.2.121.0 or 8.3.102.0. Cisco Bug IDs: CSCva98592.
Weakness: CWE-20
Which versions are affected by CVE-2016-9219?
It affects 2 products.
Products include Cisco Wireless Lan Controller Firmware, Cisco Wireless Lan Controller Software.
How do I fix CVE-2016-9219?
No fix has been published for CVE-2016-9219 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-9219 being exploited?
There is no known exploitation of CVE-2016-9219 in the wild and no public exploit code.
Other vulnerabilities in Cisco Wireless Lan Controller Software
Sources
Also known as GHSA-cf5v-7xgc-j383.