Priority LOW 25
Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01232 · Published 2013-05-04 · No fix listed
Priority MEDIUM 44
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or m…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03094 · Published 2013-01-24 · No fix listed CWE-264
Priority MEDIUM 45
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03727 · Published 2013-01-24 · No fix listed
Priority LOW 38
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload) via crafted SIP pack…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01819 · Published 2013-01-24 · No fix listed
Priority LOW 38
The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01819 · Published 2013-01-24 · No fix listed
Priority LOW 26
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTM…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03657 · Published 2012-12-19 · No fix listed CWE-79
Priority LOW 34
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01784 · Published 2012-12-19 · No fix listed CWE-352
Priority LOW 36
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in…
CVSS 2.0MEDIUM 6.3· Network · Low privileges · Interaction — · EPSS 0.05519 · Published 2012-12-19 · No fix listed
Priority MEDIUM 43
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2012-03-01 · No fix listed CWE-264
Priority LOW 36
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0121 · Published 2012-03-01 · No fix listed CWE-399
Priority LOW 38
Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0177 · Published 2012-03-01 · No fix listed CWE-399
Priority LOW 36
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0121 · Published 2012-03-01 · No fix listed CWE-399
Priority LOW 29
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of p…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.00982 · Published 2007-04-16 · No fix listed