CVE-2009-1166

The administrative web interface on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated Services...

Memory corruption

Memory leak on the Cisco Wireless LAN Controller WLC platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated...

CVE-2009-1165

CVE-2009-1165 affects Cisco Wireless LAN Controllers (WLC) and is the SSH management connections Denial of Service vulnerability. The Cisco PSIRT advisory documents a memory leak in SSH handling that can cause the device to crash and reload, affecting WLC platforms across several lines (4.x, 5.x ...

CVE-2009-1164

CVE-2009-1164 affects Cisco Wireless LAN Controllers (WLC) across multiple lines of hardware (e.g., 1500/2000/2100/4100/4200/4400, WiSM, ISR module WLCs, Catalyst 3750G). The vulnerability is a Denial of Service caused by a malformed HTTP/HTTPS authentication response in the administrative web in...

CVE-2009-1166

CVE-2009-1166 affects Cisco Wireless LAN Controllers (WLCs) across multiple series (1500/2000/2100/4100/4200/4400, WiSM, ISR WLAN modules, Catalyst 3750G WLC). The vulnerability arises from crafting an HTTP/HTTPS request to the administrative interface, enabling a remote attacker to cause a denia...

CVE-2009-1167

CVE-2009-1167 affects Cisco Wireless LAN Controllers (WLC). A remote attacker can send crafted HTTP/HTTPS requests to an administrative interface to perform unauthorized configuration changes. Affected firmware: 4.x prior to 4.2.205.0 and 5.x prior to 5.2.191.0, across WLCs and related modules. C...

Cisco WLC 4200 Basic Auth Denial Of Service

require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long authentication data, the device becomes unresponsive and reboots. Firmwar...

Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...

Cisco WLC 4402 Denial-of-Service vulnerability

======================================= Vulnerable Product: Cisco WLC 4402 most likely among many others Vulnerability discovered: January 2009 Reported to vendor: Jan 01, 2009 Fix available: not yet ======================================= TIMELINE:...

Cisco WLC 4402 Basic Auth Remote Denial of Service (meta)

Exploit for hardware platform in category dos / poc ========================================================= Cisco WLC 4402 Basic Auth Remote Denial of Service meta ========================================================= require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of...

Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)

Cisco WLC 4402 - Basic Auth Remote Denial of Service Metasploit require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long...

Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)

require 'msf/core' class Metasploit3 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco WLC 4200 HTTP server. By sending a GET request with long authentication data, the device becomes unresponsive and reboots. Firmwar...

Code injection

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

Design/Logic Flaw

The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service web authentication outage or device reload...

CVE-2009-0061

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

CVE-2009-0061

CVE-2009-0061 affects Cisco Wireless LAN Controllers (WLCs), including the Cisco 4400 WLC, WiSM, and 3750 Integrated WLC. The vulnerability lies in the WLC’s TSEC driver and can allow remote attackers to cause a denial of service (device crash/hang) by sending certain IP packets. Affected softwar...

CVE-2009-0061: Improper Input Validation

Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...

CVE-2009-0059

Cisco CVE-2009-0059 affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated WLCs. Vulnerable software versions are 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0. The issue allows remote attackers to cause a denial of...

Design/Logic Flaw

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service traffic amplification or ARP storm via a crafted unicast ARP request that 1...

CVE-2007-4011

CVE-2007-4011 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. The vulnerability permits remote DoS (traffic amplification or ARP storm) via crafted unicast ARP requests. Impact arises when the destination MAC is unknown to Layer-2 infrastructure (CSCsj69233) or durin...