Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hv89-w63p-3mf5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect parsing of HTTP packets while performing HTTP-based endpoint device classifications. An attacker could exploit this vulnerability by sending a crafted HTTP packet to an affected device. A successful exploit could cause an affected device to reboot, resulting in a DoS condition.

A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect parsing of HTTP packets while performing HTTP-based endpoint device classifications. An attacker could exploit this vulnerability by sending a crafted HTTP packet to an affected device. A successful exploit could cause an affected device to reboot, resulting in a DoS condition.

EPSS

Процентиль: 25%
0.00084
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-400

Связанные уязвимости

CVSS3: 6.5
nvd
больше 5 лет назад

A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect parsing of HTTP packets while performing HTTP-based endpoint device classifications. An attacker could exploit this vulnerability by sending a crafted HTTP packet to an affected device. A successful exploit could cause an affected device to reboot, resulting in a DoS condition.

CVSS3: 7.4
fstec
больше 5 лет назад

Уязвимость функции WLAN Local Profiling операционной системы Cisco IOS XE сетевых устройств Cisco Catalyst 9000 Series, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 25%
0.00084
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-400