Skip to content

CVE-2016-9194 A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a deni...

MediumCVSS 6.5 EPSS 0.78%
Published
Updated
Exploit status
No public exploit known

Description

A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this vulnerability by sending malformed 802.11 WME frames to a targeted device. A successful exploit could allow the attacker to cause the WLC to reload unexpectedly. The fixed versions are 8.0.140.0, 8.2.130.0, and 8.3.111.0. Cisco Bug IDs: CSCva86353.

Affected products

ProductAffected versionsFixed in
cisco wireless lan controller = 5.2.157.0 No fix listed
cisco wireless lan controller = 5.2.169.0 No fix listed
cisco wireless lan controller = 6.0_base No fix listed
cisco wireless lan controller = 7.0_base No fix listed
cisco wireless lan controller = 7.1_base No fix listed
cisco wireless lan controller = 7.2_base No fix listed
cisco wireless lan controller = 7.3.101.0 No fix listed
cisco wireless lan controller = 7.3.103.8 No fix listed
cisco wireless lan controller = 7.3.112 No fix listed
cisco wireless lan controller = 7.3_base No fix listed
cisco wireless lan controller = 7.4.1.1 No fix listed
cisco wireless lan controller = 7.4.100 No fix listed
cisco wireless lan controller = 7.4.100.60 No fix listed
cisco wireless lan controller = 7.4.110.0 No fix listed
cisco wireless lan controller = 7.4.121.0 No fix listed
cisco wireless lan controller = 7.4_base No fix listed
cisco wireless lan controller = 7.5.102.0 No fix listed
cisco wireless lan controller = 7.5.102.11 No fix listed
cisco wireless lan controller = 7.5_base No fix listed
cisco wireless lan controller = 7.6.1.62 No fix listed
cisco wireless lan controller = 7.6.100.0 No fix listed
cisco wireless lan controller = 7.6.110.0 No fix listed
cisco wireless lan controller = 7.6.120.0 No fix listed
cisco wireless lan controller = 7.6.130.0 No fix listed
cisco wireless lan controller = 8.0.0 No fix listed
Show 28 more
ProductAffected versionsFixed in
cisco wireless lan controller = 8.0.0.30220.385 No fix listed
cisco wireless lan controller = 8.0.72.140 No fix listed
cisco wireless lan controller = 8.0.100 No fix listed
cisco wireless lan controller = 8.0.115.0 No fix listed
cisco wireless lan controller = 8.0.120.0 No fix listed
cisco wireless lan controller = 8.0.121.0 No fix listed
cisco wireless lan controller = 8.1.0 No fix listed
cisco wireless lan controller = 8.1.104.37 No fix listed
cisco wireless lan controller = 8.1.111.0 No fix listed
cisco wireless lan controller = 8.1.122.0 No fix listed
cisco wireless lan controller = 8.1.130.0 No fix listed
cisco wireless lan controller 6.0 = 182.0 No fix listed
cisco wireless lan controller 6.0 = 188.0 No fix listed
cisco wireless lan controller 6.0 = 196.0 No fix listed
cisco wireless lan controller 6.0 = 199.4 No fix listed
cisco wireless lan controller 6.0 = 202.0 No fix listed
cisco wireless lan controller 7.0 = 98.0 No fix listed
cisco wireless lan controller 7.0 = 98.218 No fix listed
cisco wireless lan controller 7.0 = 116.0 No fix listed
cisco wireless lan controller 7.0 = 220.0 No fix listed
cisco wireless lan controller 7.0 = 240.0 No fix listed
cisco wireless lan controller 7.0 = 250.0 No fix listed
cisco wireless lan controller 7.0 = 252.0 No fix listed
cisco wireless lan controller 7.1 = 91.0 No fix listed
cisco wireless lan controller 7.2 = 103.0 No fix listed
cisco wireless lan controller 7.4 = 1.19 No fix listed
cisco wireless lan controller 7.4 = 1.54 No fix listed
cisco wireless lan controller 7.4 = 140.0 No fix listed

References