CVE-2013-1105

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

CVE-2013-1102

CVE-2013-1102 affects Cisco Wireless LAN Controllers (WLC) via the Wireless Intrusion Prevention System (wIPS). The issue allows a remote, unauthenticated attacker to cause a DoS (device reload) by sending crafted IP packets, tracked as Bug ID CSCtx80743. Affected software versions are 7.0 before...

CVE-2013-1105

Cisco Wireless LAN Controllers (WLC) are affected for specific software trains: 7.0 before 7.0.235.3; 7.1; 7.2 before 7.2.111.3; and 7.3 before 7.3.101.0. The issue described as CVE-2013-1105 allows remote authenticated users to bypass wireless-management settings and read or modify the device co...

CVE-2013-1104: Undefined Security Weakness

The HTTP Profiling functionality on Cisco Wireless LAN Controller WLC devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636...

CVE-2013-1102: Undefined Security Weakness

The Wireless Intrusion Prevention System wIPS component on Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service device reload via crafted IP packets, aka Bug ID...

CVE-2013-1103: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service Access Point reload via crafted SIP packets, aka Bug ID CSCts87659...

CVE-2013-1105: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

Cisco Wireless LAN Controllers Wireless Intrusion Prevention System Denial of Service Vulnerability

Cisco Wireless LAN Controllers WLC Wireless Intrusion Prevention System wIPS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of crafted IP packets by the wIPS software component...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers

The Cisco Wireless LAN Controller Cisco WLC product family is affected by the following four vulnerabilities: Cisco Wireless LAN Controllers Wireless Intrusion Prevention System wIPS Denial of Service Vulnerability Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service...

PT-2013-2877

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.3.101.0 Description The issue allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header. The Cisco Wireless LAN Controller product family is affected by multiple...

PT-2013-2878

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions 7.0 through 7.0.235.3 Cisco Wireless LAN Controller WLC devices versions 7.1 through 7.2.111.3 Cisco Wireless LAN Controller WLC devices versions 7.3 through 7.3.101.0 Description The issue...

PT-2013-2875

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.0 through 7.0.234.0 Cisco Wireless LAN Controller versions 7.1 through 7.2.109.0 Cisco Wireless LAN Controller versions 7.3 through 7.3.100.0 Description The issue is related to the improper handling of...

PT-2013-2876

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices with software 7.0 through 7.0.219.0 Cisco Wireless LAN Controller WLC devices with software 7.1 through 7.1.90.0 Cisco Wireless LAN Controller WLC devices with software 7.2 through 7.2.102.0 Descriptio...

Cisco Releases Security Advisory for Cisco Wireless LAN Controllers

The Cisco Wireless LAN Controller Cisco WLC product family is affected by multiple vulnerabilities that could potentially cause a denial-of-service condition, allow unauthorized access, or allow an attacker to execute code remotely. Cisco has released software updates that address these...

Design/Logic Flaw

Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...

PT-2013-1936

Name of the Vulnerable Software and Affected Versions Cisco Prime LAN Management Solution LMS versions 4.1 through 4.2.2 Description The issue is related to improper validation of authentication and authorization requests in TCP sessions, allowing remote attackers to execute arbitrary commands vi...

CVE-2012-6392: Improper Input Validation

Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...

Cisco Prime LAN Management Solution code execution

Insufficient network traffic validation...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...

CVE-2012-5991

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...