CVE-2018-0416

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 48.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Wireless LAN Controller (wlc)Cisco Wireless LAN Controller Software
Timeline
PublishedOct 17
Latest updateMay 13

Description

A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sens…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDcisco/wireless_lan_controller_software8.5\(130.0\), 8.9\(1.52\)+1

🔴Vulnerability Details

2
GHSA
GHSA-2qhx-74vh-w4cq: A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view sys↗2022-05-13
▶
CVEList
Cisco Wireless LAN Controller Software Information Disclosure Vulnerability↗2018-10-17
▶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Software Information Disclosure Vulnerability↗2018-10-17
▶
CVE-2018-0416 (MEDIUM CVSS 5.3) | A vulnerability in the web-based in | cvebase.io