ID:5832 - Exploit for Input validation error in Cisco Wireless LAN Controller - CVE-2019-15276

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists in the web interface due to a failure of the HTTP parsing engine to handle specially crafted URLs. A remote authenticated attacker can send a specially crafted URL to the web interface of the affected device and cause a denial of service condition on the target system.

Conversely, an unauthenticated attacker could exploit this vulnerability by persuading a user of the web interface to click the crafted URL.

Remediation