製品・ソフトウェアに関する情報

JVN脆弱性詳細

Cisco Wireless LAN Controller のソフトウェアにおけるリソース管理に関する脆弱性

Title	Cisco Wireless LAN Controller のソフトウェアにおけるリソース管理に関する脆弱性
Summary	Cisco Wireless LAN Controller (WLC) のソフトウェアには、リソース管理に関する脆弱性が存在します。ベンダは、本脆弱性を Bug ID CSCva86353 として公開しています。
Possible impacts	サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 6, 2016, midnight
Registration Date	May 10, 2017, 5:32 p.m.
Last Update	May 10, 2017, 5:32 p.m.

CVSS3.0 : 警告
Score	6.5
Vector	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS2.0 : 警告
Score	6.1
Vector	AV:A/AC:L/Au:N/C:N/I:N/A:C

Affected System

シスコシステムズ

Cisco Wireless LAN Controller ソフトウェア

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-9194	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9194
National Vulnerability Database (NVD)
2	CVE-2016-9194	https://nvd.nist.gov/vuln/detail/CVE-2016-9194

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Cisco Security Advisory
1	cisco-sa-20170405-wlc	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc

Change Log

No	Changed Details	Date of change
0	[2017年05月10日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2016-9194

Summary	A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of the 802.11 WME packet header. An attacker could exploit this vulnerability by sending malformed 802.11 WME frames to a targeted device. A successful exploit could allow the attacker to cause the WLC to reload unexpectedly. The fixed versions are 8.0.140.0, 8.2.130.0, and 8.3.111.0. Cisco Bug IDs: CSCva86353.
Publication Date	April 7, 2017, 3:59 a.m.
Registration Date	Jan. 26, 2021, 2:19 p.m.
Last Update	Nov. 21, 2024, noon

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.1.1:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.101.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.2:103.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.11:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.100:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.120.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.1_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.112:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.1.62:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.0.30220.385:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:252.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.19:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.121.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.111.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.130.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:240.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.122.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.115.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:220.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:202.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.100.60:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:250.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:116.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.110.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.54:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.120.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.72.140:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.100:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.218:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:6.0_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.130.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.0_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:196.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:188.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:199.4:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:182.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.2_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.103.8:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:5.2.157.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.1:91.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:5.2.169.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.5_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.100.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:140.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.121.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.110.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.104.37:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/97424	Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/97424	Third Party Advisory VDB Entry
3	http://www.securitytracker.com/id/1038182
4	http://www.securitytracker.com/id/1038182
5	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc	Vendor Advisory
6	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-399	リソース管理の問題	https://cwe.mitre.org/data/definitions/399.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.1.1:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.101.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.2:103.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.5.102.11:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.100:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.120.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.1_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.112:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.1.62:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.0.30220.385:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:252.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.19:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.121.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.111.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.130.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:240.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.122.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.115.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:220.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:202.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.100.60:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:250.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:116.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.110.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:1.54:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.120.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.72.140:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.100:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.218:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:6.0_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.130.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.0_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:196.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:188.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:199.4:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_6.0:182.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.0:98.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.2_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.3.103.8:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:5.2.157.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.1:91.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:5.2.169.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.5_base:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.6.100.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller_7.4:140.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.0.121.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:7.4.110.0:::::::*
cpe:2.3:a:cisco:wireless_lan_controller:8.1.104.37:::::::*