CSCwh87343 - Cisco IOS XE Software Web UI Privilege Escalation

[chrisrost]

Strange to understand for, hopefully someone can provide a little light to my mind...

Is a layer 3 interface on the wifi controller needed with access from untrusted networks via http/https to make the exploid useable?

What if, no layer 3 communication to the controllers interfaces are possible from end users networks?

Thank you in advance

Chris

[Leo Laohoo]

Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

According to the Security Bulletin, this vulnerability affects any internet-facing platform that runs on IOS-XE.  

VulnCheck has found thousands of implanted hosts.