Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability

A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device may experience a performance degradation in traffic processing or high CPU usage prior to the unexpected reload. This vulnerability is due to improper rate limiting of IP packets to the management interface. An attacker could exploit this vulnerability by sending a steady stream of IP traffic at a high rate to the management interface of the affected device. A successful exploit could allow the attacker to cause the device to reload.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

不加限制或调节的资源分配

Cisco Embedded Wireless Controller 安全漏洞

Cisco Embedded Wireless Controller是美国思科（Cisco）公司的一个无线接入器。 Cisco Embedded Wireless Controller 存在安全漏洞，该漏洞源于对管理接口的 IP 数据包速率限制不当。攻击者可以通过以高速率向受影响设备的管理接口发送稳定的 IP 流量流来利用此漏洞。 成功的利用可能允许攻击者导致设备重新加载。以下产品和版本受到影响：17.3、17.4、17.5 和 17.6 版本。

N/A

其他