CVE-2015-6311

CVE-2015-6311 affects Cisco Wireless LAN Controller (WLC) firmware versions 7.0(240.0), 7.3(101.0), and 7.4(1.19). The root cause is not discarding certain malformed 802.11i management frames from clients, allowing an unauthenticated adjacent attacker to cause a denial-of-service (device outage) ...

CVE-2015-6311: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0240.0, 7.3101.0, and 7.41.19 allow remote attackers to cause a denial of service device outage by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236...

Cisco Wireless LAN Controller RADIUS Implementation Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller product. The RADIUS implementation in Cisco Wireless LAN Controller fails to perform sufficient input validation on RADIUS Disconnect-Request packets, allowing remote attackers to exploit a vulnerability by submitting a special request to...

Cisco Wireless LAN Controller Devices 802.11i Management Frame Denial of Service Vulnerability

Cisco Wireless LAN Controller WLC devices contain a denial of service vulnerability that could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to a failure to properly discard certain malformed values in an 802.11i management frame...

CVE-2015-6302

The RADIUS functionality on Cisco Wireless LAN Controller WLC devices with software 7.0250.0 and 7.0252.0 allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419...

CVE-2015-6302: Undefined Security Weakness

The RADIUS functionality on Cisco Wireless LAN Controller WLC devices with software 7.0250.0 and 7.0252.0 allows remote attackers to disconnect arbitrary sessions via crafted Disconnect-Request UDP packets, aka Bug ID CSCuw29419...

Cisco Wireless LAN Controller Radius Packet of Disconnect Vulnerability

Cisco Wireless LAN Controller contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cisco Wireless LAN Controller (WLC) Detection (SNMP)

SNMP based detection of Cisco Wireless LAN Controller WLC. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Wireless LAN Controller RADIUS Packet of Disconnect Vulnerability

A vulnerability in the RADIUS implementation of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition by disconnecting user sessions. The vulnerability is due to a lack of proper input validation of the RADIUS...

Unspecified Vulnerability in Cisco Wireless LAN Controller Internet Access Point Protocol Module

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco.Internet Access Point Protocol IAPP is one of the wireless access point communication protocol modules. A security vulnerability exists in the IAPP module in Cisco WLC devices using software version 8.1 104.37. A...

CVE-2015-6258

The Internet Access Point Protocol IAPP module on Cisco Wireless LAN Controller WLC devices with software 8.1104.37 allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033...

Code injection

The Internet Access Point Protocol IAPP module on Cisco Wireless LAN Controller WLC devices with software 8.1104.37 allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033...

CVE-2015-6258: Improper Input Validation

The Internet Access Point Protocol IAPP module on Cisco Wireless LAN Controller WLC devices with software 8.1104.37 allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033...

Cisco Wireless LAN Controller IPv6 IAPP WIPS Report Vulnerability

A vulnerability in the Internet Access Point Protocol IAPP module of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to cause network traffic to be forwarded to an unexpected destination network. The vulnerability is due to improper input validation of the IP...

CVE-2015-4224

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

CVE-2015-4224

Cisco Wireless LAN Controller (WLC) running 7.0(240.0) is affected by CVE-2015-4224. The issue resides in the CLI processor, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary OS commands with elevated privileges via crafted CLI commands. I...

CVE-2015-4224

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

CVE-2015-4224: Improper Neutralization of Special Elements used in an OS Command

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

Cisco Wireless LAN Controller IPv6 Packet Processing Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. The Cisco Wireless LAN Controller WLC device does not properly handle anomalies generated when forwarding IPv6 packets, which is a...

CVE-2015-4215

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...