CVE-2013-3474: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Web Administrator Interface on Cisco Wireless LAN Controller WLC devices allows remote authenticated users to cause a denial of service device crash by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request...

PT-2013-4424

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices affected versions not specified Description A denial of service condition can be caused by remote authenticated users who are members of the Full Manager, Read Only, or Lobby Ambassador managers group ...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

Memory corruption

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

CVE-2013-1235

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

Code injection

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

CVE-2013-1235

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

PT-2013-2997

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices affected versions not specified Description The issue is related to the improper handling of terminated TELNET sessions, which can lead to a denial of service DoS condition. This is caused by the...

CVE-2013-1235: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

CVE-2013-1141

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...

CVE-2013-1141

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...

PT-2013-2911

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.4.1.54 and earlier Description The issue is related to the mDNS snooping functionality, which does not properly manage buffers. This allows remote authenticated users to cause a denial of service,...

CVE-2013-1141: Improper Restriction of Operations within the Bounds of a Memory Buffer

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...

CVE-2013-1105

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

CVE-2013-1102

The Wireless Intrusion Prevention System wIPS component on Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service device reload via crafted IP packets, aka Bug ID...

CVE-2013-1103

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service Access Point reload via crafted SIP packets, aka Bug ID CSCts87659...

Design/Logic Flaw

The HTTP Profiling functionality on Cisco Wireless LAN Controller WLC devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636...

Code injection

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service Access Point reload via crafted SIP packets, aka Bug ID CSCts87659...

Code injection

The Wireless Intrusion Prevention System wIPS component on Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service device reload via crafted IP packets, aka Bug ID...