CVE-2016-1362

Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device reload via a crafted HTTP request, aka Bug ID CSCun86747...

CVE-2016-1363

Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller WLC Software 7.2 through 7.4 before 7.4.140.0MD and 7.5 through 8.0 before 8.0.115.0ED allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2016-02517)

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Bonjour Task Manager for Cisco Wireless LAN Controller WLC Software allows remote attackers ...

Cisco Wireless LAN Controller Web Management Interface Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Web management interface of the Cisco Wireless LAN Controller WLC Software could allow an...

Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC devices running Cisco AireOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the...

Cisco Wireless LAN Controller Denial of Service Vulnerability

A vulnerability in the Bonjour task manager of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Bonjour traffic by the affected software. An...

Cisco Wireless LAN Controller HTTP Parsing Denial of Service Vulnerability

A vulnerability in the HTTP URL redirect feature of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to improper handling ...

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller allows a intruder to execute arbitrary operating system commands.

The vulnerability of Cisco Wireless LAN Controller’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands i...

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller allows a intruder to cause incorrect traffic redirection.

The vulnerability of the Internet Access Point Protocol IAPP module in the Cisco Wireless LAN Controller software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause incorrect traffic redirection using specially created IPv6...

The vulnerability of the microprogramming software of the Cisco wireless LAN controller allows a intruder to alter configuration parameters.

The vulnerability of Cisco wireless LAN controllers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to remotely alter configuration parameters...

Cisco Wireless LAN Controller Client Disconnection DoS

The remote Cisco Wireless LAN Controller WLC is affected by a denial of service vulnerability due to the lack of access control to the management GUI. An unauthenticated, remote attacker can exploit this to trigger client disconnections. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2015-6314

Cisco Wireless LAN Controller WLC devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153...

Design/Logic Flaw

Cisco Wireless LAN Controller WLC devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153...

CVE-2015-6314

Cisco Wireless LAN Controller WLC devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153...

Cisco Patches Hardcoded Password, DoS Vulnerabilities in Software

Cisco patched a handful of issues across its software line this week, including two critical vulnerabilities that could lead to the complete compromise of any devices running the software, and a hardcoded password that exists in some access points made by the company. According to security...

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. An unauthorized access vulnerability exists in the Cisco Wireless LAN Controller WLC software that could be exploited by an...

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

Devices running Cisco Wireless LAN Controller WLC software versions 7.6.120.0 or later, 8.0 or later, or 8.1 or later contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to modify the configuration of the device. An attacker who can connect to an...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Wireless LAN Controller software, Identity Services Engine software, and Aironet 1800 Series Access Points. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected device. US-CERT...

JVN#50775659: CG-WLBARAGM may behave as an open proxy

CG-WLBARAGM provided by Corega Inc is a wireless LAN router. CG-WLBARAGM contains an issue where it may behave as an open proxy. Impact The device may be leveraged as a proxy server to conduct cyber attacks. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#51349622: CG-WLBARGS does not properly perform authentication

CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Impact An attacker who can access the product may log in with administrative privileges. As a result, an arbitrary administrative operations may be executed. Solution Apply a Workaroun...