Read the docs
TI-2017-09054 Aliases CVE-2017-12278GHSA-h92p-pf33-v4vm

Memory corruption in Cisco Wireless LAN Controller

Priority LOW 31CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a memory leak that occurs on an affected device after the device fails to deallocate a buffer that is used when certain MIBs are polled. An attacker who knows the SNMP Version 2 SNMP Read string or has valid SNMP Version 3 credentials for an affected device could repeatedly poll the affected MIB object IDs (OIDs) and consume available memory on the device. When memory is sufficiently depleted on the device, the device will restart, resulting in a DoS condition. Cisco Bug IDs: CSCvc71674.

Why it matters now

EPSS 0.01607 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Wireless LAN ControllerCisco Wireless LAN Controller—No fix listedCNA
  • Cisco Wireless LAN Controller Vendor— Affected Cisco Wireless LAN Controller Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:wireless_lan_controller_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:wireless_lan_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-12278
  2. 2026-10-03 Alias added: GHSA-h92p-pf33-v4vm

References

Advisory 1

  • TI-2019-11388 Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability CVSS 3.1MEDIUM 6.5
  • TI-2016-01254 Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC)… CVSS 3.1CRITICAL 9.8
  • TI-2018-00213 Resource management flaw in Cisco Wireless LAN Controller CVSS 3.0HIGH 8.6
  • TI-2007-01958 The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses… CVSS 2.0HIGH 10.0
  • TI-2015-05301 Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0… CVSS 3.0CRITICAL 9.8
  • TI-2014-00660 Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS… CVSS 2.0HIGH 10.0
See all 87 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences