CVE-2016-9219CWE-20

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to…

published April 6, 2017

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending a crafted IPv6 UDP packet to a specific port on the targeted device. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This vulnerability affects Cisco Wireless LAN Controller (WLC) running software version 8.2.121.0 or 8.3.102.0. Cisco Bug IDs: CSCva98592.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03048 · 87.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2017-04-06T18:00Z
EPSS history
Timeline
  • 06 APR 18:00Z
    A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to…
    cvelistv5