CVE-2019-15276

🎯 CVE-2019-15276 🧪 PoC 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2019-15276 | A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially crafted URLs. An attacker could exploit this vulnerability by authenticating with low privileges to an affected controller and submitting the crafted URL to the web i

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially crafted URLs. An attacker could exploit this vulnerability by authenticating with low privileges to an affected controller and submitting the crafted URL to the web interface of the affected device. Conversely, an unauthenticated attacker could exploit this vulnerability by persuading a user of the web interface to click the crafted URL. A successful exploit could allow the attacker to cause an unexpected restart of the device, resulting in a DoS condition.

Klassifikation & Betroffenheit:

CWE-20 Cisco Cisco Wireless LAN Controller (WLC) unspecified <n/a

Improper Input Validation 🎯 High

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

🛡️ Empfohlene Mitigation: Consider using language-theoretic security (LangSec) techniques that characterize inputs using a formal language and build "recognizers" for that language. This effectively requires parsing to be a distinct layer that effectively enforces a boundary between raw input and internal data representations, instead of allowi…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-10 · Buffer Overflow via Environment Variable… (High) CAPEC-13 · Subverting Environment Variable Values (Very High) CAPEC-101 · Server Side Include (SSI) Injection (High) CAPEC-104 · Cross Zone Scripting (High) CAPEC-108 · Command Line Execution through SQL Injec… (Very High) CAPEC-109 · Object Relational Mapping Injection (High) CAPEC-110 · SQL Injection through SOAP Parameter Tam… (Very High) CAPEC-120 · Double Encoding (Medium)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1562.003 · Impair Defenses:Impair Command His… T1574.006 · Hijack Execution Flow:Dynamic Link… T1574.007 · Hijack Execution Flow:Path Interce…

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-76483 9.1 CVE-2026-76454 9.1 CVE-2026-20328 9.1 CVE-2026-63569 9.1 CVE-2026-20284 9.1

🧪 Exploit-Evidenz: EDB-47744 · Cisco WLC 2504 8.9 - Denial of Service (PoC)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2019

Veröffentlicht 11/2019

Heute 20.10.

CVSS-Vektor-Analyse: 7.7

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Gering

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Keine

I · Integrität Keine

A · Verfügbarkeit Hoch

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CNA-Bewertung (cisco): 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Veröffentlicht:26.11.2019

Aktualisiert:21.11.2024 19:05

Assigner (CNA):cisco

EUVD-ID:EUVD-2019-6284

CWE-20 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

Tier	CVEs	Anteil
≥90 %	726	0,2 %
≥50 %	3.222	0,9 %
≥10 %	22.088	5,9 %
<10 %	346.340	93,0 %

Noch keine Analyse zu CVE-2019-15276

Beitrag zu CVE-2019-15276 verfassen

Zero-Day & Vulnerability Intelligence Hub