CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

CVE-2014-0705

The CVE-2014-0705 issue affects Cisco Wireless LAN Controllers (WLC) where the MLDv2 Snooping feature, when handling malformed IPv6 MLDv2 packets, can trigger a denial of service (device restart). Affected IOS/WLC versions are 7.2, 7.3, 7.4 prior to 7.4.121.0, and 7.5. Cisco released a security a...

CVE-2014-0704

CVE-2014-0704 affects Cisco Wireless LAN Controller (WLC) IGMP handling. When IGMPv3 Snooping is enabled, a crafted field in an IGMPv3 message can trigger a memory over-read in the IGMP subsystem, causing a DoS via device restart. Affected releases include WLC 4.x, 5.x, 6.x, 7.0 before 7.0.250.0,...

CVE-2014-0706

CVE-2014-0706 affects Cisco Wireless LAN Controller (WLC) devices: 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0. A crafted 802.11 Ethernet frame can be processed in a way that causes a denial of service, resulting in a device restart. Root cause is improper handling of forged/crafted Ether...

CVE-2014-0707: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681...

Cisco WLC Web-Based Management Interface XSS Vulnerability (CSCuf77810)

A vulnerability in the web-based management interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

CVE-2013-6699

The Control and Provisioning of Wireless Access Points CAPWAP protocol implementation on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880...

Design/Logic Flaw

The Control and Provisioning of Wireless Access Points CAPWAP protocol implementation on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880...

CVE-2013-6698

CVE-2013-6698 concerns the web interface of Cisco Wireless LAN Controller (WLC). The vulnerability stems from insufficient restrictions on iframe usage, enabling cross-frame scripting (XFS) and clickjacking-like attacks via a crafted page. Affected component is the WLC web UI; root cause is inade...

CVE-2013-6699

The Control and Provisioning of Wireless Access Points CAPWAP protocol implementation on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880...

CVE-2013-6699

The CVE-2013-6699 entry concerns the CAPWAP implementation in Cisco Wireless LAN Controllers (WLC). A crafted CAPWAP packet can trigger a buffer over-read, allowing remote, unauthenticated attackers to cause a denial-of-service condition. Affected component is CAPWAP handling in the WLC stack; ro...

Design/Logic Flaw

The web framework on Cisco Wireless LAN Controller WLC devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCuh81011...

CVE-2013-6684

Cisco WLC CVE-2013-6684 affects the web framework in Cisco Wireless LAN Controllers. The vulnerability stems from improper validation of configuration parameters, enabling remote authenticated users to cause a denial of service via a crafted HTTP request (Bug CSCuh81011). Public exploit code is n...

CVE-2013-6684

The web framework on Cisco Wireless LAN Controller WLC devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCuh81011...

Cisco WLC Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

CVE-2013-5519

Cross-site scripting XSS vulnerability in the management interface on Cisco Wireless LAN Controller WLC devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers (cisco-sa-20130123-wlc)

The remote Cisco Wireless LAN Controller WLC is affected by one or more of the following vulnerabilities : - Wireless Intrusion Prevention System wIPS Denial of Service Vulnerability CSCtx80743 - Session Initiation Protocol Denial of Service Vulnerability CSCts87659 - Remote Code Execution...

Cisco Wireless LAN Controller (WLC) Version

The remote host is running Cisco Wireless LAN Controller WLC, an operating system for Cisco switches. It is possible to read the WLC version by connecting to the switch using SSH, SNMP, and/or CAPWAP. TRUSTED...

CVE-2013-3474

CVE-2013-3474 affects Cisco Wireless LAN Controller (WLC) Web Administrator Interface. An authenticated attacker who is a member of Full Manager, Read Only, or Lobby Ambassador groups can cause a DoS (device crash) by submitting a request with a missing or malformed parameter value, triggering th...

CVE-2013-1235

CVE-2013-1235 affects Cisco Wireless LAN Controller (WLC) software. The issue is the improper cleanup of terminated remote Telnet sessions, allowing an unauthenticated, remote attacker to exhaust Telnet resources and cause a denial of service (Telnet outage) by opening many Telnet connections and...