A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of service (DoS) condition on an affected device. The attacker would need to have valid administrator credentials on the device. This vulnerability is due to incomplete input validation for unexpected configuration options that the attacker could submit while accessing the GUI configuration menus. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted user input when using the administrative GUI configuration feature. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Software versions prior to 8.3.150.0, 8.5.140.0, 8.8.111.0 are affected by this vulnerability.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/108009 | VDB Entry Third Party Advisory |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-wlc-gui | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: cisco
Published: 2019-04-17T00:00:00
Updated: 2019-04-19T15:06:14
Reserved: 2017-11-27T00:00:00
Link: CVE-2018-0248
JSON object: View
NVD Information
Status : Modified
Published: 2019-04-17T22:29:00.217
Modified: 2019-10-09T23:31:34.177
Link: CVE-2018-0248
JSON object: View
Redhat Information
No data.
CWE