CVE-2017-12280
HighSummary
A vulnerability in the CAPWAP Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to incomplete input validation of fields in CAPWAP Discovery Request packets.
Risk Assessment
An attacker could exploit this vulnerability to trigger a device restart, potentially leading to service availability interruptions. This poses a risk to the operational continuity of the organization.
Recommendation
It is recommended to update Cisco Wireless LAN Controllers to the latest software version to mitigate this vulnerability. Additionally, monitoring network traffic for potential attack attempts is advised.
Other vulnerabilities in Cisco Wireless LAN Controllers
Original NVD description (English source)
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of fields in CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending crafted CAPWAP Discovery Request packets to an affected device. A successful exploit could allow the attacker to cause the affected device to restart unexpectedly, resulting in a DoS condition. Cisco Bug IDs: CSCvb95842.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS