CVE-2016-6375: Cisco Wireless Lan Controller Software

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service (device reload) by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over SNMP, aka Bug ID CSCuz40221.

Affected products

• Cisco Wireless Lan Controller Software: version 8.0.72.140 only; version 3.0_base only; version 3.1.59.24 only; version 3.1.105.0 only; version 3.1.111.0 only; version 3.2.78.0 only; …
• Cisco Wireless Lan Controller Software 6.0: version 182.0 only; version 188.0 only; version 196.0 only; version 199.4 only; version 202.0 only
• Cisco Wireless Lan Controller Software 7.0: version 98.0 only; version 98.218 only; version 116.0 only; version 220.0 only; version 240.0 only; version 250.0 only; …
• Cisco Wireless Lan Controller Software 7.1: version 91.0 only
• Cisco Wireless Lan Controller Software 7.2: version 103.0 only
• Cisco Wireless Lan Controller Software 7.4: version 1.19 only; version 1.54 only; version 140.0 only

Published 2016-09-12. Last modified 2026-06-17.