CVE-2010-2842

Cisco WLC (Wireless LAN Controller) software, possibly 4.2–6.0, is affected by CVE-2010-2842 where remote authenticated users can bypass access restrictions and modify configuration, potentially gaining administrative privileges. The connected sources do not specify the exact vectors or root caus...

CVE-2010-3033

Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, is affected by a vulnerability that allows remote authenticated users to bypass access restrictions and modify configuration, potentially gaining administrative privileges. The connected documents indicate the issue is a sepa...

CVE-2010-3034

Cisco Wireless LAN Controller (WLC) software is affected by CVE-2010-3034, with claims of vulnerability to ACL bypass on the controller CPU. Affected versions are described as possibly 6.0.x or 4.1 through 6.0.x, and the issue enables remote attackers to bypass ACLs and send network traffic to un...

CVE-2010-0574

CVE-2010-0574 corresponds to an IKE DoS vulnerability in Cisco Wireless LAN Controller (WLC) software. The issue allows remote attackers to cause a device reload by sending crafted IKE packets. Affected releases include 3.2.x before 3.2.215.0; 4.1 and 4.2 before 4.2.205.0 (and 4.1M/4.2M before 4....

CVE-2010-2843

Cisco Wireless LAN Controller (WLC) software is listed as affected (likely versions 4.2 through 6.0). The CVE describes a vulnerability where remote authenticated users can bypass access restrictions and modify configuration, and potentially obtain administrative privileges, via unspecified vecto...

CVE-2010-0575

Cisco Wireless LAN Controller (WLC) software is affected by CVE-2010-0575, potentially on 6.0.x and on 4.1–6.0.x. The issue enables remote attackers to bypass ACLs in the controller CPU, allowing traffic to reach unintended segments or devices via unspecified vectors. The connected Red Hat and CV...

CVE-2010-2841

Cisco WLCs are affected by an HTTP DoS vulnerability (CVE-2010-2841) where remote authenticated users can cause a device reload by sending crafted HTTP packets that trigger invalid arguments in the emweb component. Affected software includes 4.2 (before 4.2.209.0) and 4.2M (before 4.2.207.54M), 5...

CVE-2009-1166

The administrative web interface on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated Services...

Memory corruption

Memory leak on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated...

CVE-2009-1167

CVE-2009-1167 affects Cisco Wireless LAN Controllers (WLC). A remote attacker can send crafted HTTP/HTTPS requests to an administrative interface to perform unauthorized configuration changes. Affected firmware: 4.x prior to 4.2.205.0 and 5.x prior to 5.2.191.0, across WLCs and related modules. C...

CVE-2009-1166

CVE-2009-1166 affects Cisco Wireless LAN Controllers (WLCs) across multiple series (1500/2000/2100/4100/4200/4400, WiSM, ISR WLAN modules, Catalyst 3750G WLC). The vulnerability arises from crafting an HTTP/HTTPS request to the administrative interface, enabling a remote attacker to cause a denia...

CVE-2009-1164

CVE-2009-1164 affects Cisco Wireless LAN Controllers (WLC) across multiple lines of hardware (e.g., 1500/2000/2100/4100/4200/4400, WiSM, ISR module WLCs, Catalyst 3750G). The vulnerability is a Denial of Service caused by a malformed HTTP/HTTPS authentication response in the administrative web in...

CVE-2009-1165

CVE-2009-1165 affects Cisco Wireless LAN Controllers (WLC) and is the SSH management connections Denial of Service vulnerability. The Cisco PSIRT advisory documents a memory leak in SSH handling that can cause the device to crash and reload, affecting WLC platforms across several lines (4.x, 5.x ...

Cisco WLC 4200 Basic Auth Denial Of Service

require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long authentication data, the device becomes unresponsive and reboots. Firmwar...

Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...

Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)

Cisco WLC 4402 - Basic Auth Remote Denial of Service Metasploit require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long...

Cisco WLC 4402 Denial-of-Service vulnerability

======================================= Vulnerable Product: Cisco WLC 4402 most likely among many others Vulnerability discovered: January 2009 Reported to vendor: Jan 01, 2009 Fix available: not yet ======================================= TIMELINE:...

Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)

Exploit for hardware platform in category dos / poc ========================================================= Cisco WLC 4402 Basic Auth Remote Denial of Service meta ========================================================= require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of...

Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)

require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long authentication data, the device becomes unresponsive and reboots. Firmwar...

Code injection

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...