CVE-2014-0704

High

Published: 06/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The IGMP implementation on Cisco Wireless LAN Controller devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service via a crafted field in an IGMPv3 message.

Risk Assessment

Attackers can exploit this vulnerability to cause memory over-read and device restart, leading to service availability disruption.

Recommendation

It is recommended to update Cisco WLC devices to the latest software version to mitigate this vulnerability.

Other vulnerabilities in Cisco Wireless LAN Controller

CVE-2017-3832High
A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request.

Original NVD description (English source)

The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bug ID CSCuh33240.