CVE-2016-9219
Last modified
CVE-2016-9219 is a vulnerability of currently unknown severity. A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. EPSS estimates a 3.05% chance of exploitation in the next 30 days.
Description
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this vulnerability by sending a crafted IPv6 UDP packet to a specific port on the targeted device. An exploit could allow the attacker to impact the availability of the device as it could unexpectedly reload. This vulnerability affects Cisco Wireless LAN Controller (WLC) running software version 8.2.121.0 or 8.3.102.0. Cisco Bug IDs: CSCva98592.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Wireless Lan Controller Firmware | 8.2.121.0 |
| Cisco | Wireless Lan Controller Software | 8.3.102.0 |
References
- http://www.securityfocus.com/bid/97423Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97423Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-9219?
How severe is CVE-2016-9219?
How do I fix CVE-2016-9219?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-9213Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-9214Cisco Identity Services Engine (ISE) contains a vulnerabilit…
- CVE-2016-9215A vulnerability in Cisco IOS XR Software could allow an auth…
- CVE-2016-9216An IKE Packet Parsing Denial of Service Vulnerability in the…
- CVE-2016-9217A vulnerability in Cisco Intercloud Fabric for Business and …
- CVE-2016-9218A vulnerability in Cisco Hybrid Meeting Server could allow a…
- CVE-2016-9220A Denial of Service Vulnerability in 802.11 ingress packet p…
- CVE-2016-9221A Denial of Service Vulnerability in 802.11 ingress connecti…
- CVE-2016-9222A vulnerability in the web-based management interface of Cis…
- CVE-2016-9223A vulnerability in the Docker Engine configuration of Cisco …
- CVE-2016-9224A vulnerability in the Cisco Jabber Guest Server could allow…
- CVE-2016-9225A vulnerability in the data plane IP fragment handler of the…
Are you affected by CVE-2016-9219?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
