270 matches found
CVE-2015-0723
The wireless web-authentication subsystem on Cisco Wireless LAN Controller WLC devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service process crash and device restart via a crafted value, aka Bug ID CSCum03269...
Cross site scripting
Cross-site scripting XSS vulnerability in the HTML help system on Cisco Wireless LAN Controller WLC devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178...
CVE-2015-0690
CVE-2015-0690 maps to a Cisco WLC HTML Help system XSS vulnerability in Cisco Wireless LAN Controller devices prior to version 8.0. The issue allows a remote attacker to inject arbitrary web script or HTML via a specially crafted URL, as described in multiple sources (Bug CSCun95178). The root ca...
CVE-2015-0679
The CVE-2015-0679 vulnerability affects Cisco Wireless LAN Controller (WLC) devices running 7.3(103.8) and 7.4(110.0). The issue arises in the web authentication feature where ill-formed/malformed passwords are mishandled, enabling an unauthenticated, adjacent attacker to trigger a denial-of-serv...
Design/Logic Flaw
The Wireless Intrusion Detection aka WIDS functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device outage via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861...
CVE-2015-0622
The CVE-2015-0622 issue affects Cisco Wireless LAN Controller (WLC) with the Wireless Intrusion Detection (WIDS) module. The vulnerability arises from improper handling when rendering the Signature Events Summary page, which can be triggered by crafted packets sent by a remote attacker to cause a...
CVE-2014-6381
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...
Design/Logic Flaw
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...
CVE-2014-6381
Affected products: Juniper WLC devices running WLAN Software 8.0.x (before 8.0.4), 9.0.x (before 9.0.2.11), 9.0.3.x (before 9.0.3.5), or 9.1.x (before 9.1.1). Condition: in a clustered setup with proxy ARP or No Broadcast enabled. Impact: remote attackers can cause a denial of service (device dis...
CVE-2014-6381
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...
CVE-2014-6381: Improper Input Validation
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...
Cisco WLC 4402 - Basic Auth Remote Denial of Service (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...
CVE-2014-3291
Cisco Wireless LAN Controllers are affected by CVE-2014-3291 due to a NULL value in Cisco Discovery Protocol packet data not properly handled during SNMP polling. The vulnerability, described in Cisco's advisory, can be exploited by an unauthenticated, adjacent attacker who convinces a user to pe...
CVE-2014-3291: Improper Input Validation
Cisco Wireless LAN Controller WLC devices allow remote attackers to cause a denial of service NULL pointer dereference and device restart via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321...
CVE-2014-0703
Cisco Wireless LAN Controller WLC devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server...
Design/Logic Flaw
The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...
CVE-2014-0703
Cisco WLC devices running 7.4 before 7.4.110.0 distribute Aironet IOS software that contains a race condition in the status of the administrative HTTP server. This allows remote attackers to bypass access restrictions by connecting to an Aironet AP where the server was disabled ineffectively. The...
CVE-2014-0701
Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...
CVE-2014-0704
The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...
CVE-2014-0707
Cisco Wireless LAN Controller WLC devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681...