Detections
Analytics
Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability (cisco-sa-wlc-gas-dos-8FsE3AWH)
high Nessus Plugin ID 135858
Language:
Synopsis
The remote device is missing a vendor-supplied security patchDescription
A denial of service (DoS) vulnerability exists in the 802.11 Generic Advertisement Service (GAS) frame processing function of Cisco Wireless LAN Controller (WLC) Software due to incomplete input validation of the 802.11 GAS frames that are processed by an affected device. An unauthenticated, remote attacker can exploit this issue by sending a crafted 802.11 GAS frame over the air to an access point (AP), and that frame would then be relayed to the affected WLC. Also, an attacker with Layer 3 connectivity to the WLC could exploit this vulnerability by sending a malicious 802.11 GAS payload in a Control and Provisioning of Wireless Access Points (CAPWAP) packet to the device. The described attacks would cause the device to reload resulting in a Denial of Service.Solution
Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvr52059See Also
http://www.nessus.org/u?0b296684
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-73978
Plugin Details
Severity: High
ID: 135858
File Name: cisco-sa-wlc-gas-dos-8FsE3AWH.nasl
Version: 1.14
Type: combined
Family: CISCO
Published: 4/21/2020
Updated: 5/14/2024
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
CVSS Score Rationale: Based on vendor advisory
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2020-3273
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:cisco:wireless_lan_controller_software, cpe:/h:cisco:wireless_lan_controller
Required KB Items: Settings/ParanoidReport, Host/Cisco/WLC/Version, Host/Cisco/WLC/Port
Exploit Ease: No known exploits are available
Patch Publication Date: 4/15/2020
Vulnerability Publication Date: 4/15/2020
Reference Information
CVE: CVE-2020-3273