CVE-2013-1104
published 2013-01-24CVE-2013-1104: The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary…
PriorityP353critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
3.73%
88.5th percentile
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controllers | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco·2013-01-24·CVSS 9.0
CVE-2013-1102 [CRITICAL] CWE-264 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (Cisco WLC) product family is affected by the following four vulnerabilities:
Cisco Wireless LAN Controllers Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability
Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service Vulnerability
Cisco Wireless LAN Controllers HTTP Profiling Remote Code Execution Vulnerability
Cisco Wireless LAN Controllers SNMP Unauthorized Access Vulnerability
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco
CVE-2013-1104 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
CVE-2013-1104: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (Cisco WLC) product family is affected by the following four vulnerabilities: Cisco Wireless LAN Controllers Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service Vulnerability Cisco Wireless LAN Controllers HTTP Profiling Remote Code Execution Vulnerability Cisco Wireless LAN Controllers SNMP Unauthorized Access Vulnerability Cisco has released software updates that address these vulnerabilities.
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCts87659, CSCtx80743, CSCua60653, CSCts87659, CSCtx80743
GHSA
GHSA-rcx4-p563-6mqv: The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7
ghsa_unreviewed·2022-05-17
CVE-2013-1104 [HIGH] GHSA-rcx4-p563-6mqv: The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/89533http://secunia.com/advisories/51965http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlchttp://www.securityfocus.com/bid/57524http://www.securitytracker.com/id/1028027https://exchange.xforce.ibmcloud.com/vulnerabilities/81489http://osvdb.org/89533http://secunia.com/advisories/51965http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlchttp://www.securityfocus.com/bid/57524http://www.securitytracker.com/id/1028027https://exchange.xforce.ibmcloud.com/vulnerabilities/81489
2013-01-24
Published