Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability

Cisco Wireless LAN Controller contains a vulnerability that could allow an unauthenticated, adjacent attacker to cause a denial of service condition. Updates are available.

The vulnerability exists due to improper input sanitization of a certain value that is supplied by a user prior to successfully authenticating to an affected device. An attacker could exploit this vulnerability by sending a request designed to trigger the vulnerability and cause a process crash that will trigger a restart of the device, resulting in a DoS condition.

Cisco WLC versions 7.5.x or versions prior to 7.6.120 are vulnerable.

Checks if a vulnerable version is present on the target host.

Updates are available