CVE-2021-1615: Insufficient Resource Pool

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected AP. This vulnerability is due to insufficient buffer...

CVE-2021-1611: Undefined Security Weakness

A vulnerability in Ethernet over GRE EoGRE packet processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9800 Family Wireless Controller, Embedded Wireless Controller, and Embedded Wireless on Catalyst 9000 Series Switches could allow an unauthenticated, remote attacker to...

CVE-2021-34767: Always-Incorrect Control Flow Implementation

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 L2 loop in a configured VLAN, resulting in a denial of service DoS condition for that...

CVE-2021-1565

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Cisco多款产品 代码问题漏洞

Cisco IOS XE and Cisco Catalyst 9000 are both products of Cisco, Inc.Cisco IOS XE is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. The Cisco Catalyst 9000 is a switch. A co...

Cisco Embedded Wireless Controller 安全漏洞

Cisco Embedded Wireless Controller is a wireless access point from Cisco USA. A security vulnerability exists in the Cisco Embedded Wireless Controller that stems from an under-allocation of buffers in the router software packet processing function used in Catalyst access points. The vulnerabilit...

Aruba Networks Aruba Operating System 命令注入漏洞

Aruba Operating System is the operating system for the Aruba controller-managed wireless LAN and Aruba Mobile Controller from Aruba Networks, U.S.A. A command injection vulnerability exists in Aruba Operating System, and no details of the vulnerability are available...

Weak Password Vulnerability in ZTE Corporation W908-A10000

W908-A10000 is a wireless controller from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation W908-A10000, which can be exploited by an attacker to obtain sensitive information...

Arbitrary File Download Vulnerability in WS5302 of Beijing StarNet Ruijie Network Technology Co.

The WS5302 is a wireless controller. The WS5302 has an arbitrary file download vulnerability that can be exploited by an attacker to download bin files and obtain sensitive information...

Command Execution Vulnerability in RG-RAC200b (CNVD-2021-32476)

The RG-RAC200b is a wireless controller. A command execution vulnerability exists in the RG-RAC200b that can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in RG-RAC200b Wireless Controller

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A command execution vulnerability exists in the RG-RAC200b wireless...

The vulnerability of microprogrammed wireless controller software from NETGEAR, including WC7500, WC7600, WC7600v2, and WC9500, stems from insufficient measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks.

The vulnerability of microprogrammed wireless controller software from NETGEAR, including WC7500, WC7600, WC7600v2, and WC9500, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...

The vulnerability in the web interface of Cisco IOS XE wireless network controller operating systems allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the web interface of Cisco IOS XE wireless network controller devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack remotely...

Cisco IOS XE Wireless Controller software cross-site scripting vulnerability

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family CAPWAP Denial of Service (cisco-sa-ewlc-capwap-dos-2OA3JgKS)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2021-1374

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the web-based management interface of an...

Cross site scripting

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the web-based management interface of an...

Input validation

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of a...

CVE-2021-1373 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of a...

CVE-2021-1373

CVE-2021-1373 affects Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Wireless Controllers. The issue arises from insufficient validation of CAPWAP packets in CAPWAP processing, allowing an unauthenticated, remote attacker to cause a denial-of-service by sending malformed C...