A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients
A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients connecting under specific conditions. An attacker could exploit this vulnerability by causing multiple wireless clients…
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Wireless LAN Controller (WLC) | 8.10.162.0, 8.10.151.0, 8.10.171.0, 8.10.170.0, 8.10.181.0, 8.10.182.0, 8.10.183.0, 8.10.185.0 |
| Cisco | Cisco Mobility Express | 8.10.183.0, 8.10.162.0, 8.10.151.0, 8.10.185.0, 8.10.171.0, 8.10.182.0, 8.10.181.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.