Design/Logic Flaw

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

CVE-2013-1102

The Wireless Intrusion Prevention System wIPS component on Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service device reload via crafted IP packets, aka Bug ID...

CVE-2013-1103

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service Access Point reload via crafted SIP packets, aka Bug ID CSCts87659...

CVE-2013-1104

The HTTP Profiling functionality on Cisco Wireless LAN Controller WLC devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636...

CVE-2013-1105

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

CVE-2013-1102

CVE-2013-1102 affects Cisco Wireless LAN Controllers (WLC) via the Wireless Intrusion Prevention System (wIPS). The issue allows a remote, unauthenticated attacker to cause a DoS (device reload) by sending crafted IP packets, tracked as Bug ID CSCtx80743. Affected software versions are 7.0 before...

CVE-2013-1105

Cisco Wireless LAN Controllers (WLC) are affected for specific software trains: 7.0 before 7.0.235.3; 7.1; 7.2 before 7.2.111.3; and 7.3 before 7.3.101.0. The issue described as CVE-2013-1105 allows remote authenticated users to bypass wireless-management settings and read or modify the device co...

CVE-2013-1104: Undefined Security Weakness

The HTTP Profiling functionality on Cisco Wireless LAN Controller WLC devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636...

CVE-2013-1102: Undefined Security Weakness

The Wireless Intrusion Prevention System wIPS component on Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service device reload via crafted IP packets, aka Bug ID...

CVE-2013-1103: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service Access Point reload via crafted SIP packets, aka Bug ID CSCts87659...

CVE-2013-1105: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653...

PT-2013-2878

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices versions 7.0 through 7.0.235.3 Cisco Wireless LAN Controller WLC devices versions 7.1 through 7.2.111.3 Cisco Wireless LAN Controller WLC devices versions 7.3 through 7.3.101.0 Description The issue...

PT-2013-2877

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.3.101.0 Description The issue allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header. The Cisco Wireless LAN Controller product family is affected by multiple...

PT-2013-2875

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.0 through 7.0.234.0 Cisco Wireless LAN Controller versions 7.1 through 7.2.109.0 Cisco Wireless LAN Controller versions 7.3 through 7.3.100.0 Description The issue is related to the improper handling of...

PT-2013-2876

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices with software 7.0 through 7.0.219.0 Cisco Wireless LAN Controller WLC devices with software 7.1 through 7.1.90.0 Cisco Wireless LAN Controller WLC devices with software 7.2 through 7.2.102.0 Descriptio...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...

CVE-2012-5992

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...

CVE-2012-5991

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

EUVD-2012-5865

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

CVE-2012-5991

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...