Priority MEDIUM 44
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00633 · Published 2024-03-27 · No fix listed CWE-20
Priority LOW 32
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected devi…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00294 · Published 2024-03-27 · No fix listed CWE-460
Priority LOW 21
A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to…
CVSS 3.1MEDIUM 4.7· Adjacent network · No auth · No interaction · EPSS 0.00264 · Published 2023-09-27 · No fix listed CWE-400
Priority LOW 29
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00236 · Published 2023-03-23 · No fix listed CWE-77
Priority LOW 28
A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00257 · Published 2023-03-23 · No fix listed CWE-78
Priority LOW 33
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected dev…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00517 · Published 2022-09-30 · No fix listed CWE-787
Priority LOW 35
A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00216 · Published 2021-09-23 · No fix listed CWE-284
Priority LOW 20
A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00238 · Published 2021-03-24 · No fix listed CWE-668
Priority LOW 31
A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00275 · Published 2021-03-24 · No fix listed CWE-284
Priority MEDIUM 42
A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01548 · Published 2021-03-24 · No fix listed CWE-275
Priority MEDIUM 46
A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01415 · Published 2020-09-24 · No fix listed CWE-400
Priority MEDIUM 59
A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.46305 · Published 2019-11-26 · No fix listed CWE-20
Priority LOW 21
A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.0065 · Published 2019-10-16 · No fix listed CWE-22
Priority LOW 25
A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a de…
CVSS 3.0MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.01206 · Published 2019-04-18 · No fix listed CWE-20
Priority LOW 21
A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to access a CLI ins…
CVSS 3.1MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.00545 · Published 2019-04-18 · Fixed in 8.5(140.0) CWE-284
Priority LOW 39
A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00744 · Published 2019-04-18 · Fixed in 8.3.150.0, 8.5.135.0 +1 CWE-352
Priority LOW 29
A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0052 · Published 2019-04-18 · Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority LOW 30
A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00646 · Published 2019-04-18 · Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority LOW 30
A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00646 · Published 2019-04-18 · Fixed in 8.2.170.0, 8.3.150.0 +1 CWE-399
Priority MEDIUM 43
A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to hijack a valid user ses…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02041 · Published 2019-04-17 · Fixed in 8.5(144.5) CWE-287
Priority LOW 34
A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device confi…
CVSS 3.0MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.01995 · Published 2019-04-17 · Fixed in 8.3.150.0, 8.5.140.0 +1 CWE-20
Priority MEDIUM 45
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of s…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03381 · Published 2018-10-17 · No fix listed CWE-399
Priority MEDIUM 45
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory con…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03345 · Published 2018-10-17 · No fix listed CWE-200
Priority LOW 36
A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04638 · Published 2018-10-17 · No fix listed CWE-22
Priority MEDIUM 42
A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03163 · Published 2018-10-17 · No fix listed CWE-264
Load more