Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Производитель ПО
Наименование ПО
Cisco Wireless LAN Controller 2000
(3.2, 3.2.116.21, 4.0, 4.0.155.0)
Cisco Wireless LAN Controller 2100
(4.0, 4.0.155.0)
Cisco Wireless LAN Controller 4100
(3.2, 3.2.116.21)
Cisco Wireless LAN Controller 4400
(3.2, 3.2.116.21, 4.0, 4.0.155.0)
Cisco Wireless Service Module
(3.2, 3.2.116.21, 4.0, 4.0.155.0)
Описание
Уязвимость в контроллере Cisco Wireless LAN Controller (WLC) позволяет злоумышленникам, действующим удаленно, вызвать отказ в обслуживании (аварийное завершение работы устройства), используя некорректный Ethernet-трафик.
Как исправить
Используйте рекомендации производителя:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc
Ссылки
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc
CISCO (20070412 Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points): http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc
BID (23461): http://www.securityfocus.com/bid/23461
FRSIRT (ADV-2007-1368): http://www.frsirt.com/english/advisories/2007/1368
SECTRACK (1017908): http://securitytracker.com/id?1017908
XF (cisco-wlc-ethernet-traffic-dos(33607)): http://xforce.iss.net/xforce/xfdb/33607
CISCO (20070412 Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points): http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc
BID (23461): http://www.securityfocus.com/bid/23461
FRSIRT (ADV-2007-1368): http://www.frsirt.com/english/advisories/2007/1368
SECTRACK (1017908): http://securitytracker.com/id?1017908
XF (cisco-wlc-ethernet-traffic-dos(33607)): http://xforce.iss.net/xforce/xfdb/33607