Priority MEDIUM 59
A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.46305 · Published 2019-11-26 · No fix listed CWE-20
Priority MEDIUM 51
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05581 · Published 2016-04-21 · No fix listed CWE-399
Priority MEDIUM 48
A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an unauthenticated, remote attacker to cause an affected device to…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0235 · Published 2018-05-02 · No fix listed CWE-399
Priority MEDIUM 48
The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02566 · Published 2007-04-16 · No fix listed
Priority MEDIUM 47
Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02976 · Published 2016-01-15 · No fix listed CWE-287
Priority MEDIUM 47
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended acc…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01999 · Published 2014-03-06 · No fix listed CWE-362
Priority MEDIUM 47
Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.10378 · Published 2011-05-03 · No fix listed
Priority MEDIUM 46
A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01415 · Published 2020-09-24 · No fix listed CWE-400
Priority MEDIUM 45
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of s…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03381 · Published 2018-10-17 · No fix listed CWE-399
Priority MEDIUM 45
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory con…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03345 · Published 2018-10-17 · No fix listed CWE-200
Priority MEDIUM 45
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03727 · Published 2013-01-24 · No fix listed
Priority MEDIUM 44
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00633 · Published 2024-03-27 · No fix listed CWE-20
Priority MEDIUM 44
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or m…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03094 · Published 2013-01-24 · No fix listed CWE-264
Priority MEDIUM 44
Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02613 · Published 2009-02-05 · No fix listed CWE-264
Priority MEDIUM 43
A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user ses…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02041 · Published 2019-04-17 · Fixed in 8.5(144.5) CWE-287
Priority MEDIUM 43
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2012-03-01 · No fix listed CWE-264
Priority MEDIUM 42
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01548 · Published 2021-03-24 · No fix listed CWE-275
Priority MEDIUM 42
A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03163 · Published 2018-10-17 · No fix listed CWE-264
Priority MEDIUM 42
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.01482 · Published 2010-09-10 · No fix listed CWE-264
Priority MEDIUM 42
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.01482 · Published 2010-09-10 · No fix listed CWE-264
Priority MEDIUM 42
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.01482 · Published 2010-09-10 · No fix listed CWE-264
Priority MEDIUM 41
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01394 · Published 2017-03-15 · No fix listed CWE-287
Priority LOW 39
A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00744 · Published 2019-04-18 · Fixed in 8.3.150.0, 8.5.135.0 +1 CWE-352
Priority LOW 38
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an aff…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02585 · Published 2017-11-02 · No fix listed CWE-119
Priority LOW 38
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03048 · Published 2017-04-06 · No fix listed CWE-20
Load more