VulnerabilityModified

CVE-2018-0443

HIGH 7.5EPSS 3.38%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.38%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper input validation on fields within CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending malicious CAPWAP Discovery Request packets to the Cisco WLC Software. A successful exploit could allow the attacker to cause the Cisco WLC Software to disconnect associated access points (APs). While the APs disconnect and reconnect, service will be unavailable for a brief period of time, resulting in a DoS condition.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 3.38% probability · 88th percentile
CISA KEV: Not listed
Weakness: CWE-399, CWE-20
Affected: cisco/wireless lan controller software
Source: psirt@cisco.com

References

http://www.securityfocus.com/bid/105686Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041922Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-dosVendor Advisory
http://www.securityfocus.com/bid/105686Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041922Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-dosVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.