CVE-2016-9194

State
Published
Severity
Not scored
Published
Apr 6, 2017
Updated
Aug 6, 2024
Reserved
Nov 6, 2016

Read the record on cve.org

Description

A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this vulnerability by sending malformed 802.11 WME frames to a targeted device. A successful exploit could allow the attacker to cause the WLC to reload unexpectedly. The fixed versions are 8.0.140.0, 8.2.130.0, and 8.3.111.0. Cisco Bug IDs: CSCva86353.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Cisco Wireless LAN Controllern/a
  • Cisco Wireless LAN ControllerAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.