Lucene search
+L

49 matches found

0day.today
0day.today
added 2019/07/24 12:0 a.m.45 views

Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Product : Cisco Wireless Controller Version : 3.6.10E last version Vendor Homepage: https://www.cisco.com Exploit Author: Mehmet Önder Key Website: htts://cloudvist.com Description : The application interface allows users to perform certa...

0.2AI score
SaveExploits0
exploitpack
exploitpack
added 2019/07/24 12:0 a.m.52 views

Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery

Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery Product : Cisco Wireless Controller Version : 3.6.10E last version Date: 23.07.2019 Vendor Homepage: https://www.cisco.com Exploit Author: Mehmet Önder Key Website: htts://cloudvist.com CVE: CVE-2019-12624 Description : The applicatio...

6.8CVSS0.6AI score0.18706EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2019/07/23 12:0 a.m.111 views

Cisco Wireless Controller 3.6.10E Cross Site Request Forgery

Product : Cisco Wireless Controller Version : 3.6.10E last version Date: 23.07.2019 Vendor Homepage: https://www.cisco.com Exploit Author: Mehmet Önder Key Website: htts://cloudvist.com Description : The application interface allows users to perform certain actions via HTTP requests without...

0.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.6 views

The vulnerability of the SSH network protocol implementation in Cisco Wireless LAN Controllers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Secure Shell SSH network protocol implementation in Cisco Wireless LAN Controller WLC software relates to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.3CVSS5.8AI score0.00545EPSS
SaveExploits0References2
OSV
OSV
added 2019/04/18 1:29 a.m.3 views

CVE-2019-1797

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on the device with the privileges of the user, including modifying...

8.8CVSS7.3AI score0.00744EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.6 views

The vulnerability of the CAPWAP Discovery Request analysis procedure implemented in the Cisco Wireless LAN Controller allows a attacker to cause a service failure.

The vulnerability of the CAPWAP request analysis process, where the Cisco Wireless LAN Controller is involved, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by reloading the targeted device with...

8.6CVSS7.5AI score0.03381EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.8 views

The vulnerability of the CAPWAP Discovery Request analysis process implementation in the Cisco Wireless LAN Controller allows a attacker to disclose protected information.

The vulnerability of the CAPWAP request analysis process, where the Cisco Wireless LAN Controller processes Discovery Requests, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS7.3AI score0.03345EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/05/07 12:0 a.m.7 views

Sensitive Information Disclosure Vulnerability in Cisco Wireless LAN Controllers

The Cisco 5500 and 8500 Series Wireless LAN Controller WLC Software are wireless LAN control software from Cisco, Inc.The REST API is one of the real-time communication APIs. An information disclosure vulnerability exists in the REST API in the Cisco 5500 and 8500 Series WLC Software, which stems...

5.3CVSS6.3AI score0.02325EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/02 10:29 p.m.6 views

CVE-2018-0245

A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking...

5.3CVSS5.8AI score0.02325EPSS
SaveExploits0References3
OSV
OSV
added 2018/05/02 10:29 p.m.5 views

CVE-2018-0252

A vulnerability in the IP Version 4 IPv4 fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The...

8.6CVSS5.8AI score0.02483EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/11/02 12:0 a.m.7 views

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-32921)

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN. A denial of service vulnerability exists in the implementation of the 802.11v Basic Service Set BSS Transition...

7.4CVSS7.3AI score0.00708EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/09/28 12:0 a.m.7 views

Cisco IOS XE Software Elevation of Privilege Vulnerability

The Cisco 5760 Wireless LAN Controllers and Catalyst 4500E Supervisor Engine 8-E Wireless Switches are products of Cisco, Inc.The Cisco 5760 Wireless LAN Controllers are wireless controllers. The Cisco 5760 Wireless LAN Controllers are wireless controllers, and the Catalyst 4500E Supervisor Engin...

9CVSS7.2AI score0.03236EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/04/11 12:0 a.m.6 views

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-05587)

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A security vulnerability exists in IPv6 UDP ingress packet processing in the Cisco Wireless LAN Controller WLC. An unauthenticated...

7.8CVSS7.1AI score0.03048EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/07 5:59 p.m.5 views

CVE-2016-9195

A vulnerability in RADIUS Change of Authorization CoA request processing in the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to cause a denial of service DoS condition by disconnecting a single connection. This vulnerability affects Cisco Wireless LAN Controll...

5.3CVSS5.8AI score0.02048EPSS
SaveExploits0References3
OSV
OSV
added 2017/04/06 6:59 p.m.5 views

CVE-2016-9194

A vulnerability in 802.11 Wireless Multimedia Extensions WME action frame processing in Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete input validation of the 802.11 WM...

6.5CVSS5.8AI score0.00779EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.9 views

The vulnerability of the Cisco Wireless LAN Controller 4400 software allows a malicious individual to cause service failure.

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to improper memory release. This allows malicious actors operating remotely to trigger a service failure by sending frequent WebAuth authorization requests...

7.8CVSS5.5AI score0.0134EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.8 views

The vulnerability of the Cisco Wireless LAN Controller 5500 software allows a malicious individual to cause service failure.

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to improper memory release. This allows malicious actors operating remotely to trigger a service failure by sending frequent WebAuth authorization requests...

7.8CVSS5.5AI score0.0134EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.10 views

The vulnerability of the Cisco Wireless LAN Controller 2000 software allows a malicious individual to cause service failure.

The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...

7.1CVSS5.4AI score0.01689EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.13 views

The vulnerability of the Cisco Wireless LAN Controller 5500 software allows a malicious individual to cause service failure.

The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...

7.1CVSS5.4AI score0.01689EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.9 views

The vulnerability of the Cisco Wireless LAN Controller 4400 software allows a malicious individual to cause service failure.

The vulnerability in Cisco Wireless LAN Controller WLC devices allows malicious actors to trigger a service failure device reboot by using specially crafted Ethernet frames based on 802.11 protocols...

7.8CVSS5.5AI score0.0134EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder