CVE-2017-12222

A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2017-12222

A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Input validation

A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless Controllers NGWC 3850 could allow an authenticated, remote attacker to elevate...

CVE-2017-12222: Improper Input Validation

A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2017-12226: Improper Input Validation

A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless Controllers NGWC 3850 could allow an authenticated, remote attacker to elevate...

CVE-2017-12222

CVE-2017-12222 describes a DoS in Cisco IOS XE Wireless Controller Manager. An unauthenticated, adjacent attacker can trigger a restart of Cisco Catalyst 3650/3850 switches running IOS XE versions 16.1–16.3.3 by sending a crafted association request, due to insufficient input validation. The vuln...

CVE-2017-12226

A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless Controllers NGWC 3850 could allow an authenticated, remote attacker to elevate...

CVE-2017-12226

CVE-2017-12226 affects Cisco IOS XE on the 5760 WLC, Catalyst 4500E 8-E (Wireless), and NGWC 3850. The root cause is incomplete input validation of HTTP requests in the web GUI when GUI connection state or protocol changes. An authenticated Lobby Administrator could change their GUI connection st...

Cisco IOS XE Software Elevation of Privilege Vulnerability

The Cisco 5760 Wireless LAN Controllers and Catalyst 4500E Supervisor Engine 8-E Wireless Switches are products of Cisco, Inc.The Cisco 5760 Wireless LAN Controllers are wireless controllers. The Cisco 5760 Wireless LAN Controllers are wireless controllers, and the Catalyst 4500E Supervisor Engin...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-34214)

The Cisco Catalyst 3650 and 3850 switches are both switch products from Cisco, Inc.IOS XE Software is one of the operating systems used for network devices. wireless controller manager is one of the wireless controller management programs. A denial of service vulnerability exists in the wireless...

Cisco IOS XE Software for Cisco 5760 WLC, Cisco Catalyst 4500E Supervisor Engine 8-E, and Cisco NGWC 3850 GUI Privilege Escalation Vulnerability

A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engine 8-E Wireless Switches, and Cisco New Generation Wireless Controllers NGWC 3850 could allow an authenticated, remote attacker to elevate...

Unauthorized Access Vulnerability in MyPower-WNC6600 Series Wireless Controller

WNC6600 series is a new generation of wireless controller Access Controller -AC independently developed by Mapletree Technology Co. The wireless controller can centrally manage Fit APs and wireless clients. Unauthorized access vulnerability exists in MyPower-WNC6600 series wireless controllers,...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-05587)

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A security vulnerability exists in IPv6 UDP ingress packet processing in the Cisco Wireless LAN Controller WLC. An unauthenticated...

CVE-2016-9195

A vulnerability in RADIUS Change of Authorization CoA request processing in the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to cause a denial of service DoS condition by disconnecting a single connection. This vulnerability affects Cisco Wireless LAN Controll...

CVE-2016-9194

A vulnerability in 802.11 Wireless Multimedia Extensions WME action frame processing in Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete input validation of the 802.11 WM...

CVE-2016-9219

A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-04995)

The Cisco Wireless LAN Controller is a Cisco wireless LAN controller. A denial of service vulnerability exists in Cisco Wireless LAN Controller, which allows attackers to exploit the vulnerability to launch denial of service attacks...

Cisco Wireless LAN Controller Remote Security Bypass Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller from Cisco. A remote security bypass vulnerability exists in Cisco Wireless LAN Controller. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations, resulting in further attacks...

CVE-2017-3854

A vulnerability in the mesh code of Cisco Wireless LAN Controller WLC software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could...

Shunnet Wireless Smart Controller Remote Command Execution Vulnerability

"Shunnet Wireless is a platform, hardware and software independently developed by Hangzhou Shunnet Technology Co., Ltd. to provide perfect WIFI solutions for Internet cafes, hotels, small and medium-sized merchants and other WIFI hotspots. A remote arbitrary command execution vulnerability exists...