CVE-2012-5992

Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...

CVE-2012-6007

Cross-site scripting XSS vulnerability in screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than...

CVE-2013-1235

Cisco Wireless LAN Controller WLC devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service TELNET outage by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507...

CVE-2010-3033

Cisco Wireless LAN Controller WLC software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and...

CVE-2013-1141

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...

CVE-2010-2842

Cisco Wireless LAN Controller WLC software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2843 and...

CVE-2012-5991

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

CVE-2025-20186

A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambassador user account to perform a command injection attack against an affected device. This vulnerability is due to...

CVE-2025-20186

CVE-2025-20186 affects Cisco IOS XE Software, specifically the web-based management interface of the Wireless LAN Controller. The vulnerability arises from insufficient input validation in the WLC web UI, allowing an authenticated attacker with a lobby ambassador account to inject arbitrary CLI c...

PT-2025-20258 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the web-based management interface of the Wireless LAN Controller feature could allow an authenticated, remote attacker with a lobby ambassador user account...

PT-2025-20263

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco NX-OS Software affected versions not specified Cisco Wireless LAN Controller WLC AireOS Software affected versions not specified...

CISCO-SA-20180418-WLC

creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:35+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342681977139...

CISCO-SA-20181017-WLC

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:54+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794973785444...

Cisco Access Points Managed from WLC DoS (cisco-sa-ap-dos-h9TGGX6W)

According to its self-reported version, Cisco access points managed by this Cisco Wireless LAN Controller are affected by a denial of service vulnerability. Due to insufficient input validation of certain IPv4 packets, an unauthenticated, remote attacker can causing attached access points to relo...

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers (WLC) allows a attacker to cause service interruptions.

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers WLC is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sendin...

CVE-2024-20303

A vulnerability in the multicast DNS mDNS gateway feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper management of mDNS client entries. An attacker...

PT-2024-2417 · Cisco · Cisco Aironet Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Access Point AP Software affected versions not specified Cisco Aironet Access Points AP affected versions not specified Cisco Wireless LAN Controller WLC affected versions not specified Description: A vulnerability in the IP packet...

PT-2024-2578 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Wireless LAN Controllers WLCs affected versions not specified Description: A vulnerability in the multicast DNS mDNS gateway feature could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

CVE-2023-20251

A vulnerability in the memory buffer of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause memory leaks that could eventually lead to a device reboot. This vulnerability is due to memory leaks caused by multiple clients connecting under...

CVE-2023-20202

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could exploit this...