CVE-2013-1102

The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/51965
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc	Vendor Advisory
http://www.securityfocus.com/bid/57524
http://www.securitytracker.com/id/1028027

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:wireless_lan_controller_software:7.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.0.98.0:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.1:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.2:::::::*
	cpe:2.3:o:cisco:wireless_lan_controller_software:7.3:::::::*

OR	cpe:2.3:h:cisco:2000_wireless_lan_controller::::::::
	cpe:2.3:h:cisco:2100_wireless_lan_controller::::::::
	cpe:2.3:h:cisco:2500_wireless_lan_controller:-:::::::*
	cpe:2.3:h:cisco:4100_wireless_lan_controller::::::::
	cpe:2.3:h:cisco:4400_wireless_lan_controller::::::::
	cpe:2.3:h:cisco:5500_wireless_lan_controller:-:::::::*
	cpe:2.3:h:cisco:7500_wireless_lan_controller:-:::::::*
	cpe:2.3:h:cisco:8500_wireless_lan_controller:-:::::::*

History

No history.

Information

Published : 2013-01-24 21:55

Updated : 2023-12-10 11:16

NVD link : CVE-2013-1102

Mitre link : CVE-2013-1102

CVE.ORG link : CVE-2013-1102

JSON object : View

Products Affected

cisco

2100_wireless_lan_controller
wireless_lan_controller_software
8500_wireless_lan_controller
7500_wireless_lan_controller
2500_wireless_lan_controller
2000_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
5500_wireless_lan_controller

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-1102", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-01-24T21:55:05.900", "references": [{"url": "http://secunia.com/advisories/51965", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/57524", "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1028027", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743."}, {"lang": "es", "value": "El sistema de prevenci\u00f3n de intrusiones inal\u00e1mbricas (WIPS) de Cisco Wireless LAN Controller (WLC) de los dispositivos con software v7.0 antes de v7.0.235.0, v7.1 y v7.2 antes de v7.2.110.0 y v7.3 antes de v7.3.101.0 permite a atacantes remotos provocar una denegaci\u00f3n de servicios (dispositivo de recarga) a trav\u00e9s de paquetes IP manipulados, ID de error alias CSCtx80743."}], "lastModified": "2013-02-02T05:11:42.083", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B84AFFD-117A-4E7C-8F2C-01DF5DE4EDA1"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.0.98.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1855D021-7914-4862-B613-97F6664AE33F"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D96188C-F969-46A4-9600-D64FB8123031"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41B7499D-75A9-46A9-9129-BCD18533B21F"}, {"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9CCF4BD-4C5D-41BB-932C-52B428270B44"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:2000_wireless_lan_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65B6A979-5487-4ABF-AD66-522442D6DC38"}, {"criteria": "cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24B6D315-BBA5-4C37-BB74-BD1ADCA77F69"}, {"criteria": "cpe:2.3:h:cisco:2500_wireless_lan_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A0DE1A-D1A2-4F5A-B237-4F53892775E4"}, {"criteria": "cpe:2.3:h:cisco:4100_wireless_lan_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97790CF3-F428-499C-A175-1DB8380432F0"}, {"criteria": "cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62DD77D6-9809-4B8B-A19F-1D10449C546F"}, {"criteria": "cpe:2.3:h:cisco:5500_wireless_lan_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEA74EC6-0B2D-441A-8DDB-FFB736D0CF56"}, {"criteria": "cpe:2.3:h:cisco:7500_wireless_lan_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D51BCAD1-576F-44A7-85CF-DF03363DBFAB"}, {"criteria": "cpe:2.3:h:cisco:8500_wireless_lan_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE9BD1C8-10F8-4BA7-A883-42384A5EC1A5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}