Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

88 records in Wireless Lan Controller Software · all components

Priority MEDIUM 59

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.46305 Published 2019-11-26 No fix listed CWE-20
Priority MEDIUM 51

Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05581 Published 2016-04-21 No fix listed CWE-399
Priority MEDIUM 48

A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an unauthenticated, remote attacker to cause an affected device to…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0235 Published 2018-05-02 No fix listed CWE-399
Priority MEDIUM 47

Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended acc…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01999 Published 2014-03-06 No fix listed CWE-362
Priority MEDIUM 45

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03381 Published 2018-10-17 No fix listed CWE-399
Priority MEDIUM 45

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory con…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03345 Published 2018-10-17 No fix listed CWE-200
Priority MEDIUM 44

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00633 Published 2024-03-27 No fix listed CWE-20
Priority MEDIUM 44

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or m…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03094 Published 2013-01-24 No fix listed CWE-264
Priority MEDIUM 44

Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02613 Published 2009-02-05 No fix listed CWE-264
Priority MEDIUM 43

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user ses…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02041 Published 2019-04-17 Fixed in 8.5(144.5) CWE-287
Priority MEDIUM 43

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01618 Published 2012-03-01 No fix listed CWE-264
Priority MEDIUM 42

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03163 Published 2018-10-17 No fix listed CWE-264
Priority MEDIUM 42

Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01482 Published 2010-09-10 No fix listed CWE-264
Priority MEDIUM 42

Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01482 Published 2010-09-10 No fix listed CWE-264
Priority MEDIUM 42

Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01482 Published 2010-09-10 No fix listed CWE-264
Priority MEDIUM 41

A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01394 Published 2017-03-15 No fix listed CWE-287
Priority LOW 39

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00744 Published 2019-04-18 Fixed in 8.3.150.0, 8.5.135.0 +1 CWE-352
Priority LOW 38

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an aff…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02585 Published 2017-11-02 No fix listed CWE-119
Priority LOW 38

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03048 Published 2017-04-06 No fix listed CWE-20
Load more
Open these records in search →