CVE-2018-0382

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

Input validation

A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of service...

CVE-2018-0382 Cisco Wireless LAN Controller Software Session Hijacking Vulnerability

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

CVE-2018-0382 Cisco Wireless LAN Controller Software Session Hijacking Vulnerability

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

CVE-2018-0248 Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities

A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of service...

CVE-2018-0248

Cisco Wireless LAN Controller (WLC) GUI configuration vulnerability (CVE-2018-0248) could allow an authenticated remote attacker with admin credentials to trigger a device reload during GUI configuration, causing DoS. Root cause is incomplete input validation for unexpected configuration options ...

CVE-2018-0248 Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities

A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an aUTHENTICated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of service...

Cisco Wireless LAN Controller Software Session Hijacking Vulnerability

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities

Multiple vulnerabilities in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an authenticated, remote attacker to cause the device to reload unexpectedly during device configuration when the administrator is using this GUI, causing a denial of...

Cisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on the device with the privileges of the user, including modifying...

Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability

A vulnerability in certain access control mechanisms for the Secure Shell SSH server implementation for Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. The vulnerability is due to a lack of proper input-...

Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability

A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service DoS condition. The attacker would need to have valid administrato...

Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities

Multiple vulnerabilities in the handling of Inter-Access Point Protocol IAPP messages by Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerabilities exist because the software improperly validates inp...

PT-2019-1983

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

PT-2019-2129

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.5140.0 Description A vulnerability in the Secure Shell SSH server implementation could allow an unauthenticated, adjacent attacker to access a CLI instance on an affected device. T...

PT-2019-2131

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions 8.1 through 8.5 Description A vulnerability in the session identification management functionality of the web-based interface could allow an unauthenticated, remote attacker to hijack a valid...

PT-2019-1984

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.2.170.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.100.0 Description A vulnerability in...

PT-2019-1987

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software versions prior to 8.3.150.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.5.140.0 Cisco Wireless LAN Controller WLC Software versions prior to 8.8.111.0 Description A vulnerability in...

PT-2019-1985

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions prior to 8.2.170.0 Cisco Wireless LAN Controller versions prior to 8.5.150.0 Cisco Wireless LAN Controller versions prior to 8.8.100.0 Description A vulnerability in the handling of Inter-Access Point...

CVE-2018-0382: Improper Authentication

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...