====================================================================

                           CERT-RenaterProducts

               Note d'Information No. 2015/VULN087
_____________________________________________________________________

DATE                : 15/05/2015

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Cisco WLC Software versions
                       prior to 7.0.241, 7.4.122, or 7.6.120.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150513-tc
______________________________________________________________________

Vulnerability Alert

Cisco Wireless LAN Controller Web Administration Interface Authenticated
Remote Denial of Service Vulnerability

Threat Type: CWE-20: Input Validation

IntelliShield ID: 38789

Version: 1

First Published: 2015 May 13 16:12 GMT

Last Published: 2015 May 13 16:12 GMT

Port: Not available

CVE: CVE-2015-0726

Urgency: Unlikely Use

Credibility: Confirmed

Severity: Mild Damage

CVSS Base: 6.8 CVSS Calculator

CVSS Version 2.0

CVSS Temporal: 5.6

Version Summary: Cisco Wireless LAN Controller contains a vulnerability
that could allow an authenticated, remote attacker to cause a denial of
service condition. Updates are available.


Description

A vulnerability in the web administration interface of Cisco Wireless
LAN Controllers (WLC) could allow an authenticated, remote attacker to
cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to improper validation of certain parameters
submitted as part of form requests prior to processing. An attacker
could exploit this vulnerability by submitting a crafted request to a
targeted device. If successful, the attacker could cause the device to
crash, resulting in a DoS condition.

Cisco has confirmed the vulnerability and released software updates.

Warning Indicators

At the time this alert was first published, Cisco WLC Software versions
prior to 7.0.241, 7.4.122, or 7.6.120 were vulnerable.

IntelliShield Analysis

To exploit this vulnerability, an attacker must authenticate to the
targeted device. This access requirement decreases the likelihood of a
successful exploit.

Cisco indicates through the CVSS score that functional exploit code
exists; however, the code is not known to be publicly available.


Vendor Announcements

Cisco has released bug IDs CSCum65159 and CSCum65252 for registered
users, which contain additional details and an up-to-date list of
affected product versions.


Impact

An authenticated, remote attacker could exploit this vulnerability to
cause an affected device to crash, resulting in a DoS condition.

Technical Information

The vulnerability is due to improper validation of certain parameters
submitted as part of form requests prior to processing by an affected
device.

An attacker could exploit this vulnerability by submitting a crafted
request to a targeted device. If successful, the attacker could cause
the device to crash, resulting in a DoS condition.


Safeguards

Administrators are advised to apply the appropriate updates.

Administrators are advised to allow only trusted users to have network
access.

Administrators are advised to allow only privileged users to access
administration or management systems.

Administrators are advised to monitor affected systems.


Patches/Software

Cisco customers with active contracts can obtain updates through the
Software Center at the following link: Cisco. Cisco customers without
contracts can obtain upgrades by contacting the Cisco Technical
Assistance Center at 1-800-553-2447 or 1-408-526-7209 or via email at
tac@cisco.com.


Alert History

Initial Release


Product Sets

The security vulnerability applies to the following combinations of
products.

Primary Products:

Cisco Cisco Wireless LAN Controller (WLC) 7.0 Base, 98.0, 98.218, 116.0,
220.0
| 7.4 Base, 1.54, .100, .100.60, .110.0, .121.0 | 7.6 .100.0, .110.0

Associated Products:

N/A

Alerts and bulletins on the Cisco Security Intelligence Operations
Portal are highlighted by analysts in the Cisco Threat Operations
Center and represent a subset of the comprehensive content that is
available through Cisco Security IntelliShield Alert Manager Service.
This customizable threat and vulnerability alert service provides
security staff with access to timely, accurate, and credible
information about threats and vulnerabilities that may
affect their environment.


LEGAL DISCLAIMER

The urgency and severity ratings of this alert are not tailored to
individual users; users may value alerts differently based upon their
network configurations and circumstances. THE ALERT, AND INFORMATION
CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY
ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE ALERT,
AND INFORMATION CONTAINED THEREIN, OR MATERIALS LINKED FROM THE ALERT,
IS AT YOUR OWN RISK. INFORMATION IN THIS ALERT AND ANY RELATED
COMMUNICATIONS IS BASED ON OUR KNOWLEDGE AT THE
TIME OF PUBLICATION AND IS SUBJECT TO CHANGE WITHOUT NOTICE. CISCO
RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================