Lucene search
HistoryJan 24, 2013 - 9:55 p.m.
CVE-2013-1104
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
Affected configurations
Node
cisco2000_wireless_lan_controller
ORcisco2100_wireless_lan_controller
ORcisco2500_wireless_lan_controllerMatch-
ORcisco4100_wireless_lan_controller
ORcisco4400_wireless_lan_controller
ORcisco5500_wireless_lan_controllerMatch-
ORcisco7500_wireless_lan_controllerMatch-
ORcisco8500_wireless_lan_controllerMatch-
ciscowireless_lan_controller_softwareMatch7.3.101.0
Related
prion
prion
Design/Logic Flaw
2013-01-24 21:55:00
cvelist
cvelist
CVE-2013-1104
2013-01-24 21:00:00
cve
cve
CVE-2013-1104
2013-01-24 21:55:05
nessus
nessus
cisco
cisco
Multiple Vulnerabilities in Cisco Wireless LAN Controllers
2013-01-23 16:00:00
securityvulns
securityvulns
Cisco Wireless LAN Controller multiple security vulnerabilities
2013-01-27 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
Related for NVD:CVE-2013-1104