CVE-2019-1799
Description
A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on fields within IAPP messages. An attacker could exploit the vulnerability by sending malicious IAPP messages to an affected device. A successful exploit could allow the attacker to cause the Cisco WLC Software to reload, resulting in a DoS condition. Software versions prior to 8.2.170.0, 8.5.150.0, and 8.8.100.0 are affected.
How to fix
- cisco wireless_lan_controller8.2.170.0 or later
- cisco wireless_lan_controller_software8.3.150.0, 8.5.131.0, 8.8.100.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless_lan_controller | v < 8.2.170.0 | 8.2.170.0 |
| cisco wireless_lan_controller_software | 8.3.143.0 ≤ v < 8.3.150.0, 8.5.103.0 ≤ v < 8.5.131.0, 8.6.101.0 ≤ v < 8.8.100.0 | 8.3.150.0, 8.5.131.0, 8.8.100.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.