Lucene search

K
cve[email protected]CVE-2013-3474
HistoryAug 30, 2013 - 8:55 p.m.

CVE-2013-3474

2013-08-3020:55:00
CWE-119
web.nvd.nist.gov
17
cisco
wlc
web administrator interface
cve-2013-3474
denial of service
vulnerability
nvd

6.6 Medium

AI Score

Confidence

Low

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

73.0%

The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request that (1) lacks a parameter value or (2) contains a malformed parameter value, aka Bug IDs CSCuh14313, CSCuh14159, CSCuh14368, and CSCuh14436.

6.6 Medium

AI Score

Confidence

Low

6.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

73.0%

Related for CVE-2013-3474