Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

88 records

Priority MEDIUM 44

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00633 Published 2024-03-27 No fix listed CWE-20
Priority LOW 32

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected devi…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00294 Published 2024-03-27 No fix listed CWE-460
Priority LOW 21

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device.  This vulnerability is due to…

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00264 Published 2023-09-27 No fix listed CWE-400
Priority LOW 29

A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00236 Published 2023-03-23 No fix listed CWE-77
Priority LOW 28

A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00257 Published 2023-03-23 No fix listed CWE-78
Priority LOW 33

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected dev…

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00517 Published 2022-09-30 No fix listed CWE-787
Priority LOW 35

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2021-09-23 No fix listed CWE-284
Priority LOW 20

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00238 Published 2021-03-24 No fix listed CWE-668
Priority LOW 31

A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00275 Published 2021-03-24 No fix listed CWE-284
Priority MEDIUM 59

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.46305 Published 2019-11-26 No fix listed CWE-20
Priority LOW 21

A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.0065 Published 2019-10-16 No fix listed CWE-22
Priority LOW 25

A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a de…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01206 Published 2019-04-18 No fix listed CWE-20
Priority LOW 21

A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI ins…

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00545 Published 2019-04-18 Fixed in 8.5(140.0) CWE-284
Priority LOW 39

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00744 Published 2019-04-18 Fixed in 8.3.150.0, 8.5.135.0 +1 CWE-352
Priority LOW 29

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0052 Published 2019-04-18 Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority LOW 30

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00646 Published 2019-04-18 Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority LOW 30

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00646 Published 2019-04-18 Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority MEDIUM 43

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user ses…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02041 Published 2019-04-17 Fixed in 8.5(144.5) CWE-287
Priority LOW 34

A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device confi…

CVSS 3.0MEDIUM 6.8 Network High privileges No interaction EPSS 0.01995 Published 2019-04-17 Fixed in 8.3.150.0, 8.5.140.0 +1 CWE-20
Priority MEDIUM 45

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03381 Published 2018-10-17 No fix listed CWE-399
Priority MEDIUM 45

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory con…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03345 Published 2018-10-17 No fix listed CWE-200
Priority LOW 36

A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04638 Published 2018-10-17 No fix listed CWE-22
Priority MEDIUM 42

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03163 Published 2018-10-17 No fix listed CWE-264
Load more