CVE-2015-0723

Cisco Wireless LAN Controller (WLC) firmware 7.5.x and 7.6.x before 7.6.120 is affected by a denial-of-service in the web authentication subsystem. The vulnerability stems from improper validation of user-supplied input, enabling an unauthenticated, adjacent attacker to craft a request that cause...

CVE-2015-0726

CVE-2015-0726 affects Cisco Wireless LAN Controller (WLC) web administration interfaces. Affected releases include before 7.0.241, 7.1.x–7.4.x before 7.4.122, and 7.5.x–7.6.x before 7.6.120. The issue is caused by improper validation of certain form parameters, enabling an authenticated, remote a...

CVE-2015-0726: Improper Input Validation

The web administration interface on Cisco Wireless LAN Controller WLC devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service device crash via unspecified parameters, aka Bug IDs CSCum65159 and...

CVE-2015-0723: Undefined Security Weakness

The wireless web-authentication subsystem on Cisco Wireless LAN Controller WLC devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service process crash and device restart via a crafted value, aka Bug ID CSCum03269...

Cisco Wireless LAN Controller Web Administration Interface Authenticated Remote Denial of Service Vulnerability

A vulnerability in the web administration interface of Cisco Wireless LAN Controllers WLC could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of certain parameters submitted as part of form...

PT-2015-4841

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions prior to 7.0.241 Cisco Wireless LAN Controller WLC versions 7.1.x through 7.4.x before 7.4.122 Cisco Wireless LAN Controller WLC versions 7.5.x and 7.6.x before 7.6.120 Description A vulnerability in...

Cisco Wireless LAN Controller Wireless Web Authentication Denial of Service Vulnerability

A vulnerability in the wireless web authentication subsystem of Cisco Wireless LAN Controller WLC could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability exists due to improper input sanitization of a certain value that is supplied by a user...

PT-2015-4838

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.5.x through 7.6.119 Description A denial of service issue exists due to improper input sanitization of a certain value supplied by a user prior to authentication. An attacker could exploit this by...

cURL and libcurl Unauthorized Operation Vulnerability

CURL is a set of file transfer tools that utilize URL syntax to work at the command line.Libcurl is a free, open source client-side URL transfer library. A security vulnerability exists in cURL and libcurl versions 7.10.6 through 7.41.0 that stems from the program failing to properly reuse NTLM...

Netgear WNR2000v4 Abuse / XSS / Command Injection Vulnerabilities

Netgear WNR2000v4 suffers from code execution, missing abuse control, and cross site scripting vulnerabilities. I'm releasing a few vulnerabilities for the WNR2000v4 Netgear router. Netgear is currently working these issues. Quick Fix --------- If you own a WNR2000v4, set a strong password and se...

Netgear WNR2000v4 Abuse / XSS / Command Injection

I'm releasing a few vulnerabilities for the WNR2000v4 Netgear router. Netgear is currently working these issues. Quick Fix --------- If you own a WNR2000v4, set a strong password and set security questions to jibberish. Timeline -------- FEB2015 - "MW" Volunteers to be victim to router pwning...

112 ipTIME Remote Code Execution Vulnerabilities

Many 112 ipTIME routers / modems / firewalls suffer from a remote root code execution vulnerability. Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published:...

112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges Advisory URL: https://pierrekim.github.io/advisories/2015-iptime-0x00.txt.asc Date published: 2015-04-17 Vendors contacted:...

Cisco Wireless LAN Controller HTML Help System Cross-Site Scripting Vulnerability

HTML help system on Cisco Wireless LAN Controller WLC is a set of HTML help system for use in Wireless LAN Controller WLC devices from Cisco. A cross-site scripting vulnerability exists in the HTML help system on Cisco WLC devices prior to version 8.0. A remote attacker could exploit this...

CVE-2015-0690

Cross-site scripting XSS vulnerability in the HTML help system on Cisco Wireless LAN Controller WLC devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178...

CVE-2015-0690

Cross-site scripting XSS vulnerability in the HTML help system on Cisco Wireless LAN Controller WLC devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178...

CVE-2015-0690: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the HTML help system on Cisco Wireless LAN Controller WLC devices before 8.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCun95178...

Cisco Wireless LAN Controller HTML Help Cross-Site Scripting Vulnerability

A vulnerability in the HTML help system of Cisco Wireless LAN Controller WLC devices could allow an unauthenticated, remote attacker conduct cross-site scripting attacks. An unauthenticated, remote attacker who can convince a user of an affected system to follow a malicious link or visit an...

PT-2015-4812

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions prior to 8.0 Description A cross-site scripting XSS issue exists in the HTML help system, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. An unauthenticated...

Cisco Wireless LAN Controller WEB Authentication Denial of Service Vulnerability

The Cisco Wireless LAN Controller is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A security vulnerability in the Cisco Wireless LAN Controller WEB authentication feature allows remote attackers ...