1. Home
  2. CVE Database
  3. CVE-2016-6376
MEDIUM · 6.5

CVE-2016-6376

The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows re...

Vulnerability Description

The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoWireless Lan Controller3.0_base
CiscoWireless Lan Controller 6.0182.0
CiscoWireless Lan Controller 7.098.0
CiscoWireless Lan Controller 7.191.0
CiscoWireless Lan Controller 7.2103.0
CiscoWireless Lan Controller 7.41.19

Related Weaknesses (CWE)

CWE-399

References

FAQ

What is CVE-2016-6376?

CVE-2016-6376 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows re...

How severe is CVE-2016-6376?

CVE-2016-6376 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-6376?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Wireless Lan Controller, Cisco Wireless Lan Controller 6.0, Cisco Wireless Lan Controller 7.0, Cisco Wireless Lan Controller 7.1, Cisco Wireless Lan Controller 7.2.