Cisco Wireless LAN Controller ICMP Packet Handling Denial of Service Vulnerability

Bugtraq ID:	47606
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1613
Remote:	Yes
Local:	No
Published:	Apr 27 2011 12:00AM
Updated:	Sep 26 2012 02:50PM
Credit:	Cisco
Vulnerable:	Cisco WLC526 Mobility Express Controller 0 Cisco WLC Modules for Integrated Services Routers 0 Cisco Wireless LAN Control 6.0.182 .0 Cisco Wireless LAN Control 7.0 Cisco Wireless LAN Control 6.0.199.0 Cisco Wireless LAN Control 6.0.196.0 Cisco Wireless LAN Control 6.0.188.0 Cisco Wireless LAN Control 6.0 Cisco 2100 Wireless LAN Controller (WLC) 0
Not Vulnerable:	Cisco Wireless LAN Control 7.0.98.216 Cisco Wireless LAN Control 7.0.112.0 Cisco Wireless LAN Control 6.0.200.0

Cisco Wireless LAN Controller ICMP Packet Handling Denial of Service Vulnerability

Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCth74426.
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsq24002

Cisco Wireless LAN Controller ICMP Packet Handling Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

The following exploit code is available:

• /data/vulnerabilities/exploits/47606.txt

Cisco Wireless LAN Controller ICMP Packet Handling Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Wireless LAN Controller ICMP Packet Handling Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco Wireless LAN Controllers Denial of Service Vulner (Cisco)