CVE-2019-1796

CVE-2019-1796 describes a denial-of-service vulnerability in Cisco Wireless LAN Controller (WLC) Software, affecting versions prior to 8.2.170.0, 8.5.150.0, and 8.8.100.0. The flaw stems from improper input validation of Inter-Access Point Protocol (IAPP) messages. An unauthenticated, adjacent attacker can exploit this by sending malicious IAPP messages, causing the WLC to reload and resulting in a denial-of-service condition. This vulnerability has a CVSS score of 6.5 (Medium), indicating a low attack complexity and no user interaction required, but it necessitates physical proximity to the network. While the potential impact is high availability loss, there is no compromise of confidentiality or integrity. Currently, there is no known active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. The vulnerability has also garnered minimal community discussion or media coverage, suggesting a low level of public awareness or concern.