CVE-2014-0703
published 2014-03-06CVE-2014-0703: Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP…
PriorityP353critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
2.02%
78.6th percentile
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controller_software | — | — |
| cisco | wireless_lan_controllers | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0 Firmware/Configuration race condition (cisco-sa-20140305-wlc / Nessus ID 73018)
vuldb·2026-05-07·CVSS 10.0
CVE-2014-0703 [CRITICAL] Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0 Firmware/Configuration race condition (cisco-sa-20140305-wlc / Nessus ID 73018)
A vulnerability categorized as problematic has been discovered in Cisco Wireless LAN Controller 4.0/5.0/6.0/7.0. Affected by this vulnerability is an unknown functionality of the component Firmware/Configuration Handler. Executing a manipulation can lead to race condition.
This vulnerability is handled as CVE-2014-0703. The attack can be executed remotely. Additionally, an exploit exists.
It is advisable to upgrade the affected component.
GHSA
GHSA-h9c9-7pc5-rxr8: Cisco Wireless LAN Controller (WLC) devices 7
ghsa_unreviewed·2022-05-17
CVE-2014-0703 [HIGH] CWE-362 GHSA-h9c9-7pc5-rxr8: Cisco Wireless LAN Controller (WLC) devices 7
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco·2014-03-06·CVSS 10.0
CVE-2014-0701 [CRITICAL] CWE-20 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (WLC) product family is affected by the following vulnerabilities:
Cisco Wireless LAN Controller Denial of Service Vulnerability
Cisco Wireless LAN Controller Unauthorized Access to Associated Access Points Vulnerability
Cisco Wireless LAN Controller IGMP Version 3 Denial of Service Vulnerability
Cisco Wireless LAN Controller MLDv2 Denial of Service Vulnerability
Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability
Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability
Cisco has released software updates that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoS
Cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
vendor_cisco
CVE-2014-0703 Multiple Vulnerabilities in Cisco Wireless LAN Controllers
CVE-2014-0703: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
The Cisco Wireless LAN Controller (WLC) product family is affected by the following vulnerabilities: Cisco Wireless LAN Controller Denial of Service Vulnerability Cisco Wireless LAN Controller Unauthorized Access to Associated Access Points Vulnerability Cisco Wireless LAN Controller IGMP Version 3 Denial of Service Vulnerability Cisco Wireless LAN Controller MLDv2 Denial of Service Vulnerability Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability Cisco Wireless LAN Controller Crafted Frame Denial of Service Vulnerability Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/cont
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-06
Published