CVE-2013-1105
published 2013-01-24CVE-2013-1105: Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote…
PriorityP346critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
3.09%
86.2th percentile
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controllers | — | — |
CVSS provenance
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco9.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4gfq-6cg6-xc56: Cisco Wireless LAN Controller (WLC) devices with software 7
ghsa_unreviewed·2022-05-17
CVE-2013-1105 [HIGH] GHSA-4gfq-6cg6-xc56: Cisco Wireless LAN Controller (WLC) devices with software 7
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco·2013-01-24·CVSS 9.0
CVE-2013-1102 [CRITICAL] CWE-264 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (Cisco WLC) product family is affected by the following four vulnerabilities:
Cisco Wireless LAN Controllers Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability
Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service Vulnerability
Cisco Wireless LAN Controllers HTTP Profiling Remote Code Execution Vulnerability
Cisco Wireless LAN Controllers SNMP Unauthorized Access Vulnerability
Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco
CVE-2013-1105 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
CVE-2013-1105: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (Cisco WLC) product family is affected by the following four vulnerabilities: Cisco Wireless LAN Controllers Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service Vulnerability Cisco Wireless LAN Controllers HTTP Profiling Remote Code Execution Vulnerability Cisco Wireless LAN Controllers SNMP Unauthorized Access Vulnerability Cisco has released software updates that address these vulnerabilities.
CWE: CWE-264, CWE-399, CWE-264, CWE-399
Bug IDs: CSCts87659, CSCtx80743, CSCua60653, CSCts87659, CSCtx80743
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/89532http://secunia.com/advisories/51965http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlchttp://www.securityfocus.com/bid/57524http://www.securitytracker.com/id/1028027https://exchange.xforce.ibmcloud.com/vulnerabilities/81490http://osvdb.org/89532http://secunia.com/advisories/51965http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlchttp://www.securityfocus.com/bid/57524http://www.securitytracker.com/id/1028027https://exchange.xforce.ibmcloud.com/vulnerabilities/81490
2013-01-24
Published