CVE-2013-6698

CVE-2013-6698 concerns the web interface of Cisco Wireless LAN Controller (WLC). The vulnerability stems from insufficient restrictions on iframe usage, enabling cross-frame scripting (XFS) and clickjacking-like attacks via a crafted page. Affected component is the WLC web UI; root cause is inade...

CVE-2013-6699

The CVE-2013-6699 entry concerns the CAPWAP implementation in Cisco Wireless LAN Controllers (WLC). A crafted CAPWAP packet can trigger a buffer over-read, allowing remote, unauthenticated attackers to cause a denial-of-service condition. Affected component is CAPWAP handling in the WLC stack; ro...

CVE-2013-6699

The Control and Provisioning of Wireless Access Points CAPWAP protocol implementation on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880...

Design/Logic Flaw

The web framework on Cisco Wireless LAN Controller WLC devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCuh81011...

CVE-2013-6684

Cisco WLC CVE-2013-6684 affects the web framework in Cisco Wireless LAN Controllers. The vulnerability stems from improper validation of configuration parameters, enabling remote authenticated users to cause a denial of service via a crafted HTTP request (Bug CSCuh81011). Public exploit code is n...

CVE-2013-6684

The web framework on Cisco Wireless LAN Controller WLC devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCuh81011...

Cisco WLC Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

CVE-2013-5519

Cross-site scripting XSS vulnerability in the management interface on Cisco Wireless LAN Controller WLC devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810...

Cisco Wireless LAN Controller (WLC) Version

The remote host is running Cisco Wireless LAN Controller WLC, an operating system for Cisco switches. It is possible to read the WLC version by connecting to the switch using SSH, SNMP, and/or CAPWAP. TRUSTED...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers (cisco-sa-20130123-wlc)

The remote Cisco Wireless LAN Controller WLC is affected by one or more of the following vulnerabilities : - Wireless Intrusion Prevention System wIPS Denial of Service Vulnerability CSCtx80743 - Session Initiation Protocol Denial of Service Vulnerability CSCts87659 - Remote Code Execution...

CVE-2013-3474

CVE-2013-3474 affects Cisco Wireless LAN Controller (WLC) Web Administrator Interface. An authenticated attacker who is a member of Full Manager, Read Only, or Lobby Ambassador groups can cause a DoS (device crash) by submitting a request with a missing or malformed parameter value, triggering th...

CVE-2013-1235

CVE-2013-1235 affects Cisco Wireless LAN Controller (WLC) software. The issue is the improper cleanup of terminated remote Telnet sessions, allowing an unauthenticated, remote attacker to exhaust Telnet resources and cause a denial of service (Telnet outage) by opening many Telnet connections and...

Code injection

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...

CVE-2013-1141

CVE-2013-1141 affects Cisco Wireless LAN Controller (WLC) devices running software 7.4.1.54 and earlier. The issue is in the mDNS snooping feature where improper buffer handling can be exploited by crafted mDNS packets to trigger a denial of service (device reload) by remote authenticated users. ...

Cisco Wireless LAN Controller multiple security vulnerabilities

DoS via IP packet processing in IPS, DoS via SIP packet, SNMP unauthorized access, HTTP Profiling code execution...

CVE-2013-1104

The HTTP Profiling functionality on Cisco Wireless LAN Controller WLC devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636...

CVE-2013-1104

The CVE-2013-1104 issue affects Cisco Wireless LAN Controllers (WLC) with software 7.3.101.0, where HTTP Profiling allows remote authenticated users to execute arbitrary code by sending a crafted HTTP User-Agent header (Remote Code Execution). Multiple public references confirm the HTTP Profiling...

CVE-2013-1105

Cisco Wireless LAN Controllers (WLC) are affected for specific software trains: 7.0 before 7.0.235.3; 7.1; 7.2 before 7.2.111.3; and 7.3 before 7.3.101.0. The issue described as CVE-2013-1105 allows remote authenticated users to bypass wireless-management settings and read or modify the device co...

CVE-2013-1103

CVE-2013-1103 affects Cisco Wireless LAN Controllers in the affected software lines (7.0 before 7.0.220.0; 7.1 before 7.1.91.0; 7.2 before 7.2.103.0). The issue is a Denial of Service triggered by crafted SIP packets that can cause an Access Point reload (Bug ID CSCts87659). Public sources includ...

CVE-2012-6007

Cross-site scripting XSS vulnerability in screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than...