CVE-2018-0235 : A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an u

A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of certain 802.11 management information element frames that an affected device receives from wireless clients. An attacker could exploit this vulnerability by sending a malformed 802.11 management frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects only Cisco Wireless LAN Controllers that are running Cisco Mobility Express Release 8.5.103.0. Cisco Bug IDs: CSCvg07024.

Published 2018-05-02 22:29:00

Updated 2020-10-22 16:45:41

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2018-0235

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0235

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.4	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-0235

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2018-0235

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdos

Cisco Wireless LAN Controller 802.11 Management Frame Denial of Service Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/104080

Cisco Wireless LAN Controller CVE-2018-0235 Denial of Service Vulnerability
Third Party Advisory;VDB Entry

Products affected by CVE-2018-0235

Cisco » Wireless Lan Controller Software » Version: 8.6(1.106)
cpe:2.3:o:cisco:wireless_lan_controller_software:8.6\(1.106\):*:*:*:*:*:*:*
Matching versions
Cisco » Wireless Lan Controller Software » Version: 8.6(1.114)
cpe:2.3:o:cisco:wireless_lan_controller_software:8.6\(1.114\):*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2018-0235

Exploit prediction scoring system (EPSS) score for CVE-2018-0235

CVSS scores for CVE-2018-0235

CWE ids for CVE-2018-0235

References for CVE-2018-0235

Products affected by CVE-2018-0235