CVE-2016-1363 Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers t...
CriticalCVSS 9.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless lan controller software | >= 7.2.0, < 7.4.140.0 | 7.4.140.0 |
| cisco wireless lan controller software | >= 7.5.0, < 8.0.115.0 | 8.0.115.0 |
References
- 20160420 Cisco Wireless LAN Controller HTTP Parsing Denial of Service Vulnerability vendor-advisory
- 1035633 third-party-advisory vdb-entry