Details of VAR-201505-0198

ID

VAR-201505-0198

CVE

CVE-2015-0756

TITLE

Cisco Wireless LAN Controller Service disruption in device software (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2015-002875

DESCRIPTION

Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104. The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. Attackers can exploit this issue to cause denial-of-service condition. Attackers can exploit this issue to cause denial-of-service condition on an affected device as well as any wireless access points associated with the device, denying services to legitimate users. A security vulnerability exists in Cisco WLC devices using version 7.4(1.1) software

Trust: 2.61

sources: NVD: CVE-2015-0756 // JVNDB: JVNDB-2015-002875 // CNVD: CNVD-2015-03508 // BID: 74863 // VULHUB: VHN-78702 // VULMON: CVE-2015-0756

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-03508

AFFECTED PRODUCTS

vendor:	cisco	model:	wireless lan controller	scope:	eq	version:	7.4\(1.1\)	Trust: 1.6
vendor:	cisco	model:	wireless lan controller	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	wireless lan controller software	scope:	eq	version:	7.4(1.1)	Trust: 0.8
vendor:	cisco	model:	wireless lan controller devices with software	scope:	eq	version:	7.4(1.1)	Trust: 0.6
vendor:	cisco	model:	wireless lan controller	scope:	eq	version:	7.4(1.1)	Trust: 0.3

sources: CNVD: CNVD-2015-03508 // BID: 74863 // JVNDB: JVNDB-2015-002875 // CNNVD: CNNVD-201505-582 // NVD: CVE-2015-0756

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-0756
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2015-0756
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2015-03508
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201505-582
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-78702
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2015-0756
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2015-0756
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
CNVD:	CNVD-2015-03508
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-78702
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2015-03508 // VULHUB: VHN-78702 // VULMON: CVE-2015-0756 // JVNDB: JVNDB-2015-002875 // CNNVD: CNNVD-201505-582 // NVD: CVE-2015-0756

PROBLEMTYPE DATA

problemtype:	CWE-20	Trust: 1.9
problemtype:	CWE-399	Trust: 1.1

sources: VULHUB: VHN-78702 // JVNDB: JVNDB-2015-002875 // NVD: CVE-2015-0756

THREAT TYPE

specific network environment

Trust: 0.6

sources: CNNVD: CNNVD-201505-582

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201505-582

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-002875

PATCH

title:	39041	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=39041	Trust: 0.8
title:	Patch for Cisco Wireless LAN Controller TCP Traffic Handling Denial of Service Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/59149	Trust: 0.6
title:	Cisco: Cisco Wireless LAN Controller TCP Denial of Service Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=Cisco-SA-20150527-CVE-2015-0756	Trust: 0.1

sources: CNVD: CNVD-2015-03508 // VULMON: CVE-2015-0756 // JVNDB: JVNDB-2015-002875

EXTERNAL IDS

db:	NVD	id:	CVE-2015-0756	Trust: 3.5
db:	SECUNIA	id:	64620	Trust: 1.2
db:	SECTRACK	id:	1032419	Trust: 1.2
db:	BID	id:	74863	Trust: 1.0
db:	JVNDB	id:	JVNDB-2015-002875	Trust: 0.8
db:	CNNVD	id:	CNNVD-201505-582	Trust: 0.7
db:	CNVD	id:	CNVD-2015-03508	Trust: 0.6
db:	VULHUB	id:	VHN-78702	Trust: 0.1
db:	VULMON	id:	CVE-2015-0756	Trust: 0.1

sources: CNVD: CNVD-2015-03508 // VULHUB: VHN-78702 // VULMON: CVE-2015-0756 // BID: 74863 // JVNDB: JVNDB-2015-002875 // CNNVD: CNNVD-201505-582 // NVD: CVE-2015-0756

REFERENCES

url:	http://tools.cisco.com/security/center/viewalert.x?alertid=39041	Trust: 2.1
url:	http://www.securitytracker.com/id/1032419	Trust: 1.2
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0756	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0756	Trust: 0.8
url:	http://secunia.com/advisories/64620/	Trust: 0.6
url:	http://secunia.com/advisories/64620	Trust: 0.6
url:	http://www.cisco.com/	Trust: 0.3
url:	http://www.cisco.com/en/us/products/ps6302/products_sub_category_home.html	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/20.html	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/399.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20150527-cve-2015-0756	Trust: 0.1

sources: CNVD: CNVD-2015-03508 // VULHUB: VHN-78702 // VULMON: CVE-2015-0756 // BID: 74863 // JVNDB: JVNDB-2015-002875 // CNNVD: CNNVD-201505-582 // NVD: CVE-2015-0756

CREDITS

Cisco

Trust: 0.3

sources: BID: 74863

SOURCES

db:	CNVD	id:	CNVD-2015-03508
db:	VULHUB	id:	VHN-78702
db:	VULMON	id:	CVE-2015-0756
db:	BID	id:	74863
db:	JVNDB	id:	JVNDB-2015-002875
db:	CNNVD	id:	CNNVD-201505-582
db:	NVD	id:	CVE-2015-0756

LAST UPDATE DATE

2024-11-23T23:09:15.467000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2015-03508	date:	2015-06-02T00:00:00
db:	VULHUB	id:	VHN-78702	date:	2017-01-04T00:00:00
db:	VULMON	id:	CVE-2015-0756	date:	2017-01-04T00:00:00
db:	BID	id:	74863	date:	2015-05-27T00:00:00
db:	JVNDB	id:	JVNDB-2015-002875	date:	2015-06-03T00:00:00
db:	CNNVD	id:	CNNVD-201505-582	date:	2015-06-05T00:00:00
db:	NVD	id:	CVE-2015-0756	date:	2024-11-21T02:23:39.637

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2015-03508	date:	2015-06-02T00:00:00
db:	VULHUB	id:	VHN-78702	date:	2015-05-29T00:00:00
db:	VULMON	id:	CVE-2015-0756	date:	2015-05-29T00:00:00
db:	BID	id:	74863	date:	2015-05-27T00:00:00
db:	JVNDB	id:	JVNDB-2015-002875	date:	2015-06-03T00:00:00
db:	CNNVD	id:	CNNVD-201505-582	date:	2015-05-29T00:00:00
db:	NVD	id:	CVE-2015-0756	date:	2015-05-29T15:59:10.203