CVE-2012-0370

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service device reload via a sequence of 1 HTTP or 2 HTTPS packets, aka Bug ID CSCtt47435...

CVE-2012-0368

The administrative management interface on Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service device crash via a malformed URL in an HTTP request, aka B...

CVE-2012-0371

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

Code injection

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service device reload via a sequence of 1 HTTP or 2 HTTPS packets, aka Bug ID CSCtt47435...

Code injection

Cisco Wireless LAN Controller WLC devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service device reload via a sequence of IPv6 packets, aka Bug ID CSCtt07949...

Code injection

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

Design/Logic Flaw

The administrative management interface on Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service device crash via a malformed URL in an HTTP request, aka B...

CVE-2012-0368

The administrative management interface on Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service device crash via a malformed URL in an HTTP request, aka B...

CVE-2012-0369

Cisco Wireless LAN Controller WLC devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service device reload via a sequence of IPv6 packets, aka Bug ID CSCtt07949...

CVE-2012-0370

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service device reload via a sequence of 1 HTTP or 2 HTTPS packets, aka Bug ID CSCtt47435...

CVE-2012-0371

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

CVE-2012-0368

CVE-2012-0368 affects Cisco Wireless LAN Controllers (WLC) where an unauthenticated remote attacker can cause a device crash by sending a malformed URL in HTTP requests to the WLC admin interface. The vulnerability is lifecycle-limited to affected software trains: 4.x, 5.x, 6.0, and 7.0 before 7....

CVE-2012-0369

CVE-2012-0369 affects Cisco Wireless LAN Controller (WLC) devices running IOS-like software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0. The vulnerability allows unauthenticated remote attackers to cause a denial of service (device reload) by sending a sequence of ...

CVE-2012-0371

CVE-2012-0371 affects Cisco Wireless LAN Controllers (WLCs) running 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4 where CPU-based ACLs are enabled. An unauthenticated remote attacker could read or modify the device configuration by connecting to TCP port 1023, enabling unauthorized access. Affected dev...

CVE-2012-0370: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service device reload via a sequence of 1 HTTP or 2 HTTPS packets, aka Bug ID CSCtt47435...

CVE-2012-0371: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

CVE-2012-0368: Undefined Security Weakness

The administrative management interface on Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service device crash via a malformed URL in an HTTP request, aka B...

CVE-2012-0369: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service device reload via a sequence of IPv6 packets, aka Bug ID CSCtt07949...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

PT-2012-2530

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions 4.x through 7.0 before 7.0.220.4 Description The issue allows remote attackers to read or modify the configuration of Cisco Wireless LAN Controller devices when CPU-based ACLs are enabled...