CVE-2017-3832

High

Published: 06/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Risk Assessment

An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface, potentially leading to a device reload and resulting in a DoS condition. This affects only the Cisco Wireless LAN Controller 8.3.102.0 release.

Recommendation

It is recommended to update the Cisco Wireless LAN Controller software to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in Cisco Wireless LAN Controller 8.3.102.0

CVE-2014-0704High
The IGMP implementation on Cisco Wireless LAN Controller devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service via a crafted field in an IGMPv3 message.

Original NVD description (English source)

A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198.