CVE-2014-0704
Cisco Wireless LAN Controller Software 4.x-7.3 - Denial of Service via IGMPv3 Message
Title source: llmDescription
The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bug ID CSCuh33240.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
Scores
EPSS
0.0118
EPSS Percentile
64.4%
Details
CWE
CWE-399
Status
published
Products (50)
cisco/wireless_lan_controller
cisco/wireless_lan_controller_software
4.0
cisco/wireless_lan_controller_software
4.0.108
cisco/wireless_lan_controller_software
4.0.155.0
cisco/wireless_lan_controller_software
4.0.155.5
cisco/wireless_lan_controller_software
4.0.179.8
cisco/wireless_lan_controller_software
4.0.179.11
cisco/wireless_lan_controller_software
4.0.196
cisco/wireless_lan_controller_software
4.0.206.0
cisco/wireless_lan_controller_software
4.0.217.0
... and 40 more
Published
Mar 06, 2014
Tracked Since
Feb 18, 2026