VULNERABILITY INTELLIGENCE
CVE-2015-6258
CVSS score5 MEDIUM
EPSS probability1.97%
CISA KEVNot currently listed
Published2015-08-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry