Design/Logic Flaw

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

Cross site scripting

Cross-site scripting XSS vulnerability in screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than...

CVE-2012-6007

Cross-site scripting XSS vulnerability in screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than...

CVE-2012-6007

Cisco Wireless LAN Controller (WLC) devices running software 7.2.110.0 are affected by CVE-2012-6007, a cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html. The issue allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter (Bug...

CVE-2012-5992

CVE-2012-5992 affects Cisco Wireless LAN Controller (WLC) devices running software 7.2.110.0. Concrete details from connected documents describe multiple CSRF vulnerabilities that allow an attacker to hijack administrator authentication for requests such as adding administrative accounts (via scr...

CVE-2012-5991

CVE-2012-5991 affects Cisco Wireless LAN Controller 7.2.110.0. The issue arises from insufficient validation of user-supplied input to the WLC web interface (web_auth_custom.html), enabling remote authenticated users to cause a denial of service (device reload) via a crafted buttonClicked value i...

CVE-2012-5992

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...

Cisco Wireless Lan Controller 7.2.110.0 Multiple Vulnerabilities

Exploit for hardware platform in category dos / poc Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u email protected? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

CVE-2012-0369

CVE-2012-0369 affects Cisco Wireless LAN Controller (WLC) devices running IOS-like software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0. The vulnerability allows unauthenticated remote attackers to cause a denial of service (device reload) by sending a sequence of ...

CVE-2012-0371

CVE-2012-0371 affects Cisco Wireless LAN Controllers (WLCs) running 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4 where CPU-based ACLs are enabled. An unauthenticated remote attacker could read or modify the device configuration by connecting to TCP port 1023, enabling unauthorized access. Affected dev...

CVE-2012-0370

CVE-2012-0370 affects Cisco Wireless LAN Controllers (WLC) with Cisco WLC software versions 4.x, 5.x, 6.0 and 7.0 before 7.0.220.0, and 7.1 before 7.1.91.0, when WebAuth is enabled. The WebAuth Denial of Service vulnerability allows an unauthenticated remote attacker to cause a device reload by s...

CVE-2012-0368

CVE-2012-0368 affects Cisco Wireless LAN Controllers (WLC) where an unauthenticated remote attacker can cause a device crash by sending a malformed URL in HTTP requests to the WLC admin interface. The vulnerability is lifecycle-limited to affected software trains: 4.x, 5.x, 6.0, and 7.0 before 7....

Cisco Releases Multiple Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the following products: Cius Wifi devices running Cius Software Version 9.21 SR1 and prior Cisco Unified Communications Manager Software versions 6.x, 7.x, and 8.x Cisco Business Edition 3000, 5000, and 6000 Cisco Uni...

CVE-2011-1613

CVE-2011-1613 affects Cisco Wireless LAN Controllers (notably 2100 series) where unauthenticated attackers can cause a device reload (DoS) by sending a sequence of ICMP packets. The issue, tracked as CSCth74426, has concrete exploit material in multiple sources, including Cisco PSIRT advisory and...

Cisco Security Advisory: Cisco Wireless LAN Controllers Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Wireless LAN Controllers Denial of Service Vulnerability Document ID: 112916 Advisory ID: cisco-sa-20110427-wlc Revision 1.0 For Public Release 2011 April 27 1600 UTC GMT...

CVE-2010-2843

Cisco Wireless LAN Controller WLC software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and...

Authentication flaw

Cisco Wireless LAN Controller WLC software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-0575...

Design/Logic Flaw

Cisco Wireless LAN Controller WLC software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and...

Authentication flaw

Cisco Wireless LAN Controller WLC software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-3034...