571 matches found
CVE-2015-6258
The Internet Access Point Protocol IAPP module on Cisco Wireless LAN Controller WLC devices with software 8.1104.37 allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033...
Code injection
The Internet Access Point Protocol IAPP module on Cisco Wireless LAN Controller WLC devices with software 8.1104.37 allows remote attackers to trigger incorrect traffic forwarding via crafted IPv6 packets, aka Bug ID CSCuv40033...
Cisco Wireless LAN Controller IPv6 IAPP WIPS Report Vulnerability
A vulnerability in the Internet Access Point Protocol IAPP module of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to cause network traffic to be forwarded to an unexpected destination network. The vulnerability is due to improper input validation of the IP...
CVE-2015-4224
Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...
CVE-2015-4224
Cisco Wireless LAN Controller (WLC) running 7.0(240.0) is affected by CVE-2015-4224. The issue resides in the CLI processor, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary OS commands with elevated privileges via crafted CLI commands. I...
CVE-2015-4224
Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...
Cisco Wireless LAN Controller IPv6 Packet Processing Denial of Service Vulnerability
The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. The Cisco Wireless LAN Controller WLC device does not properly handle anomalies generated when forwarding IPv6 packets, which is a...
CVE-2015-4215
Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...
Code injection
Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...
CVE-2015-4215
Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...
Cisco Wireless LAN Controller IPv6 Packet Handling Denial of Service Vulnerability
A vulnerability in Cisco Wireless LAN Controller WLC devices could allow an unauthenticated, adjacent attacker could to cause a crash of an affected device. The vulnerability exists due to an unhandled exception that may occur when IPv6 traffic is forwarded to a device that is not configured for...
The vulnerability of the Microprogramming Software of the Cisco Wireless LAN Controller 4100 allows a malicious attacker to execute arbitrary code.
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
The vulnerability of the Microprogrammed Software of the Cisco Wireless LAN Controller 4400 allows a remote attacker to execute arbitrary code.
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 2000 allows a remote attacker to execute arbitrary code.
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 5500 allows a malicious attacker to execute arbitrary code.
Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...
Cisco Wireless LAN Controller TCP Traffic Handling Denial of Service Vulnerability
The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. Cisco Wireless LAN Controller 7.4 1.1 and other versions process TCP traffic incorrectly, allowing attackers to exploit vulnerabiliti...
CVE-2015-0756
Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...
Code injection
Cisco Wireless LAN Controller WLC devices with software 7.41.1 allow remote attackers to cause a denial of service wireless-networking outage via crafted TCP traffic on the local network, aka Bug ID CSCug67104...
CVE-2015-0756
CVE-2015-0756 affects Cisco Wireless LAN Controller (WLC) devices running software 7.4(1.1) and related versions. The vulnerability stems from improper input validation in TCP traffic handling, allowing an unauthenticated, adjacent attacker to send crafted TCP packets to cause a denial-of-service...
Cisco Wireless LAN Controller Web Authentication DoS (CSCum03269)
The remote Cisco Wireless LAN Controller WLC is affected by a denial of service vulnerability in the web authentication subsystem due to improper validation of user-supplied input. An unauthenticated, adjacent attacker can exploit this, via a specially crafted request, to cause a process crash an...