Cisco Wireless Lan Controller Software vulnerabilities
84 known vulnerabilities affecting cisco/wireless_lan_controller_software.
Total CVEs
84
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH32MEDIUM40LOW1
Vulnerabilities
Page 3 of 5
CVE-2015-6302MEDIUMCVSS 5.0v7.0.250.0v7.0.252.02015-09-26
CVE-2015-6302 [MEDIUM] CWE-399 CVE-2015-6302: The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0) and
The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0) and 7.0(252.0) allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419.
nvd
CVE-2015-6258MEDIUMCVSS 5.0v8.1.104.372015-08-22
CVE-2015-6258 [MEDIUM] CWE-20 CVE-2015-6258: The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with
The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033.
nvd
CVE-2015-4224HIGHCVSS 7.2v7.0\(240.0\)2015-06-26
CVE-2015-4224 [HIGH] CWE-78 CVE-2015-4224: Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute ar
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474.
nvd
CVE-2015-4215MEDIUMCVSS 6.1v7.5.102.02015-06-24
CVE-2015-4215 [MEDIUM] CWE-399 CVE-2015-4215: Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote atta
Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046.
nvd
CVE-2015-0723MEDIUMCVSS 6.1v7.5.102.0v7.5.102.11+1 more2015-05-16
CVE-2015-0723 [MEDIUM] CWE-399 CVE-2015-0723: The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7
The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.
nvd
CVE-2015-0726MEDIUMCVSS 6.8v7.0.98.0v7.0.98.218+10 more2015-05-16
CVE-2015-0726 [MEDIUM] CWE-20 CVE-2015-0726: The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.
The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka Bug IDs CSCum65159 and CSCum65252.
nvd
CVE-2015-0690MEDIUMCVSS 4.3≤ 8.0.72.140v7.4.121.0+1 more2015-04-07
CVE-2015-0690 [MEDIUM] CWE-79 CVE-2015-0690: Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (W
Cross-site scripting (XSS) vulnerability in the HTML help system on Cisco Wireless LAN Controller (WLC) devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178.
nvd
CVE-2015-0679MEDIUMCVSS 6.1v7.3\(103.8\)v7.4\(110.0\)2015-03-28
CVE-2015-0679 [MEDIUM] CWE-20 CVE-2015-0679: The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7
The web-authentication functionality on Cisco Wireless LAN Controller (WLC) devices 7.3(103.8) and 7.4(110.0) allows remote attackers to cause a denial of service (device reload) via a malformed password, aka Bug ID CSCui57980.
nvd
CVE-2014-0703CRITICALCVSS 10.0v7.4.100.0v7.4.100.602014-03-06
CVE-2014-0703 [CRITICAL] CWE-362 CVE-2014-0703: Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software wit
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf662
nvd
CVE-2014-0707HIGHCVSS 7.8v7.2v7.2.103.0+5 more2014-03-06
CVE-2014-0707 [HIGH] CWE-399 CVE-2014-0707: Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attacker
Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681.
nvd
CVE-2014-0705HIGHCVSS 7.1v7.2v7.2.103.0+6 more2014-03-06
CVE-2014-0705 [HIGH] CWE-399 CVE-2014-0705: The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7
The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.
nvd
CVE-2014-0704HIGHCVSS 7.1v4.0v4.0.108+51 more2014-03-06
CVE-2014-0704 [HIGH] CWE-399 CVE-2014-0704: The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0
The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bug ID CSCuh33240.
nvd
CVE-2014-0706HIGHCVSS 7.8v7.2v7.2.103.0+5 more2014-03-06
CVE-2014-0706 [HIGH] CWE-399 CVE-2014-0706: Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allo
Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929.
nvd
CVE-2014-0701HIGHCVSS 7.8v7.0v7.0.220.0+8 more2014-03-06
CVE-2014-0701 [HIGH] CWE-399 CVE-2014-0701: Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0
Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service (reboot) by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361.
nvd
CVE-2013-1141MEDIUMCVSS 6.1≤ 7.4.1.54v3.0+55 more2013-02-28
CVE-2013-1141 [MEDIUM] CWE-119 CVE-2013-1141: The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.5
The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID CSCue04153.
nvd
CVE-2013-1104CRITICALCVSS 9.0v7.3.101.02013-01-24
CVE-2013-1104 [CRITICAL] CVE-2013-1104: The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.10
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
nvd
CVE-2013-1105CRITICALCVSS 9.0v7.0v7.0.98.0+6 more2013-01-24
CVE-2013-1105 [CRITICAL] CWE-264 CVE-2013-1105: Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.
nvd
CVE-2013-1103HIGHCVSS 7.8v7.0v7.0.98.0+3 more2013-01-24
CVE-2013-1103 [HIGH] CVE-2013-1103: Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0,
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload) via crafted SIP packets, aka Bug ID CSCts87659.
nvd
CVE-2013-1102HIGHCVSS 7.8v7.0v7.0.98.0+3 more2013-01-24
CVE-2013-1102 [HIGH] CVE-2013-1102: The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) dev
The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743.
nvd
CVE-2012-6007MEDIUMCVSS 4.3PoCv7.2.110.02012-12-19
CVE-2012-6007 [MEDIUM] CVE-2012-6007: Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992.
nvd