CVE-2015-6314

critical
Published 2016-01-15 · Modified 2026-05-06
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
10.0
VIR risk
9.8

Description

Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.

Predictions

Exploit likelihood
97%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-wlc

Application impact

VendorProductVersionsFixed
cisco ciscowireless_lan_controller_software8.0.72.140
cisco ciscowireless_lan_controller_software8.0_base
cisco ciscowireless_lan_controller_software8.1.0
cisco ciscowireless_lan_controller_software8.1.104.37
cisco ciscowireless_lan_controller_software8.1.111.0
cisco ciscowireless_lan_controller_software8.1.122.0

References

CWEs

CWE-287

Verify integrity in audit chain (admin only). AS-IS.