QID 317431

QID 317431: Cisco Internetwork Operating System (IOS) XE Software for Wireless LAN Controllers Multicast DNS Denial of Service (DoS) Vulnerability (cisco-sa-wlc-mdns-dos-4hv6pBGf)

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.

Affected Products:
Catalyst 9800-CL Wireless Controllers for Cloud
Catalyst 9800 Embedded Wireless Controller for Catalyst 9300, 9400, and 9500 Series Switches
Catalyst 9800 Series Wireless Controllers
Embedded Wireless Controller on Catalyst APs

QID Detection Logic (Authenticated):
The check matches Cisco IOS XE version retrieved via Unix Auth using "show version" command.
QID Detection Logic (Unauthenticated):
The check matches Cisco IOS XE version retrieved via SNMP or TCP/IP Fingerprint or NTP or Telnet.
Note: This QID do not support detection for Catalyst 9800 Embedded Wireless Controller

A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

CVSS V3 rated as High - 7.4 severity.

CVSS V2 rated as High - 6.1 severity.

Solution

Customers are advised to refer to cisco-sa-wlc-mdns-dos-4hv6pBGf for more information.

Vendor References

cisco-sa-wlc-mdns-dos-4hv6pBGf - sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

CVEs related to QID 317431

CVE-2024-20303 |

Software Advisories

Advisory ID	Software	Component	Link
cisco-sa-wlc-mdns-dos-4hv6pBGf			sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].