CVE-2018-0443 Denial of service in Cisco Wireless LAN Controller (WLC)
Remote attackers can cause denial of service by sending malicious CAPWAP packets, disconnecting access points and disrupting wireless service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0443?
CVE-2018-0443 is a high-severity denial of service vulnerability in Cisco Wireless Lan Controller Software, published on 17 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper input validation on fields within CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending malicious CAPWAP Discovery Request packets to the Cisco WLC Software. A successful exploit could allow the attacker to cause the Cisco WLC Software to disconnect associated access points (APs). While the APs disconnect and reconnect, service will be unavailable for a brief period of time, resulting in a DoS condition.
Which versions are affected by CVE-2018-0443?
It affects 1 product.
Products include Cisco Wireless Lan Controller Software.
How do I fix CVE-2018-0443?
No fix has been published for CVE-2018-0443 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-0443 being exploited?
There is no known exploitation of CVE-2018-0443 in the wild and no public exploit code.
Other vulnerabilities in Cisco Wireless Lan Controller Software
Sources
Also known as GHSA-w55v-5qm4-5hrw.