571 matches found
CVE-2014-3291
Cisco Wireless LAN Controller WLC devices allow remote attackers to cause a denial of service NULL pointer dereference and device restart via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321...
Cisco Wireless LAN Controller IGMPv3远程拒绝服务漏洞
Bugtraq ID:65980 CVE ID:CVE-2014-0704 Cisco Wireless LAN Controller负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller IGMP处理子系统存在安全漏洞，由于不正确校验特制IGMP消息类型中的特定字段，攻击者可向网络注入恶意IGMPv3消息至WLC监听的网络，IGMP子系统在处理消息时可触发内存越界读，可使设备重载，造成拒绝服务攻击。 0 Cisco Wireless LAN Controller 4.x Cisco Wireless...
Cisco Wireless LAN Controller拒绝服务漏洞
Bugtraq ID:65977 CVE ID:CVE-2014-0701 Cisco Wireless LAN Controller负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller WebAuth功能存在安全漏洞，允许未验证远程攻击者使设备重载。 由于处理WebAuth登录过程中未能释放使用的内存，允许攻击者高速提交大量WebAuth请求，可使设备进行不稳定状态，消耗大量内存造成设备重启。 0 Cisco Wireless LAN Controller 7.0 Cisco Wireless LA...
Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0706)
BUGTRAQ ID: 65985 CVECAN ID: CVE-2014-0706 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...
Cisco Wireless LAN Controller远程未授权访问漏洞(CVE-2014-0703)
BUGTRAQ ID: 65983 CVECAN ID: CVE-2014-0703 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller推送到Cisco Aironet 1260, 2600, 3500, 3600系列接入点的IOS代码存在安全漏洞，未经身份验证的远程攻击者可利用此漏洞未授权访问受影响设备。该漏洞源于竞争条件错误，虽然受影响接入点的管理HTTP服务器即使已经由管理员禁用，也会依然启用。 0 Cisco Wireless LAN Controller 厂商补丁：...
Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0707)
BUGTRAQ ID: 65986 CVECAN ID: CVE-2014-0707 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...
CVE-2014-0707
Cisco Wireless LAN Controller WLC devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681...
CVE-2014-0704
The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...
CVE-2014-0705
The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...
CVE-2014-0701
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...
CVE-2014-0706
Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...
Command injection
Cisco Wireless LAN Controller WLC devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929...
Design/Logic Flaw
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...
Design/Logic Flaw
The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...
Code injection
Cisco Wireless LAN Controller WLC devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service device restart via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681...
CVE-2014-0703
Cisco Wireless LAN Controller WLC devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server...
CVE-2014-0706
CVE-2014-0706 affects Cisco Wireless LAN Controller (WLC) devices: 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0. A crafted 802.11 Ethernet frame can be processed in a way that causes a denial of service, resulting in a device restart. Root cause is improper handling of forged/crafted Ether...
CVE-2014-0701
Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...
CVE-2014-0703
Cisco WLC devices running 7.4 before 7.4.110.0 distribute Aironet IOS software that contains a race condition in the status of the administrative HTTP server. This allows remote attackers to bypass access restrictions by connecting to an Aironet AP where the server was disabled ineffectively. The...
CVE-2014-0701
Cisco Wireless LAN Controller WLC devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service reboot by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361...