CVE-2019-1796

CVE-2019-1796 affects Cisco Wireless LAN Controller (WLC) software due to improper validation of input in Inter-Access Point Protocol (IAPP) messages. An unauthenticated adjacent attacker can send malicious IAPP messages to trigger a reload of the WLC, causing a DoS. Affected software versions in...

CVE-2016-1363

Cisco Wireless LAN Controller (WLC) Software 7.2–7.4 before 7.4.140.0(MD) and 7.5–8.0 before 8.0.115.0(ED) are affected by a buffer overflow in the HTTP redirection function. The vulnerability allows unauthenticated remote attackers to craft HTTP requests that could cause a buffer overflow, poten...

CVE-2015-0690

CVE-2015-0690 maps to a Cisco WLC HTML Help system XSS vulnerability in Cisco Wireless LAN Controller devices prior to version 8.0. The issue allows a remote attacker to inject arbitrary web script or HTML via a specially crafted URL, as described in multiple sources (Bug CSCun95178). The root ca...

CVE-2010-0575

Cisco Wireless LAN Controller (WLC) software is affected by CVE-2010-0575, potentially on 6.0.x and on 4.1–6.0.x. The issue enables remote attackers to bypass ACLs in the controller CPU, allowing traffic to reach unintended segments or devices via unspecified vectors. The connected Red Hat and CV...

CVE-2017-12280

Cisco WLCs are affected by CVE-2017-12280 due to incomplete input validation in CAPWAP Discovery Request parsing, allowing unauthenticated remote attackers to cause a restart and DoS. The issue impacts Cisco Wireless LAN Controllers; exploitation involves sending crafted CAPWAP Discovery Request ...

CVE-2019-1799

Cisco Wireless LAN Controller (WLC) Software is affected by CVE-2019-1799 due to improper validation of fields in Inter-Access Point Protocol (IAPP) messages, enabling an unauthenticated adjacent attacker to cause a DoS by forcing a reload. Affected releases include versions prior to 8.2.170.0, 8...

CVE-2009-0059

Cisco CVE-2009-0059 affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated WLCs. Vulnerable software versions are 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0. The issue allows remote attackers to cause a denial of...

CVE-2011-1613

CVE-2011-1613 affects Cisco Wireless LAN Controllers (notably 2100 series) where unauthenticated attackers can cause a device reload (DoS) by sending a sequence of ICMP packets. The issue, tracked as CSCth74426, has concrete exploit material in multiple sources, including Cisco PSIRT advisory and...

CVE-2013-1103

CVE-2013-1103 affects Cisco Wireless LAN Controllers in the affected software lines (7.0 before 7.0.220.0; 7.1 before 7.1.91.0; 7.2 before 7.2.103.0). The issue is a Denial of Service triggered by crafted SIP packets that can cause an Access Point reload (Bug ID CSCts87659). Public sources includ...

CVE-2018-0247

The CVE-2018-0247 entry describes an authentication bypass in Web Authentication (WebAuth) clients used by Cisco IOS on Cisco Aironet Access Points and Wireless LAN Controllers (WLCs). Affected configurations require: AP in FlexConnect NAT mode, WLAN in central switching (unique IP per client), A...

CVE-2018-15395

Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability (CVE-2018-15395) allows an authenticated, adjacent attacker to abuse dynamic Security Group Tag (SGT) assignment during roaming between SSIDs within a Cisco TrustSec domain, potentially gaining unauthorized privileged netwo...

CVE-2007-2039

CVE-2007-2039 affects Cisco Wireless LAN Controller (WLC) NPU processing. The vulnerability allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) by sending crafted SNAP packets, malformed 802.11 traffic, or packets with certain header length...

CVE-2010-2841

Cisco WLCs are affected by an HTTP DoS vulnerability (CVE-2010-2841) where remote authenticated users can cause a device reload by sending crafted HTTP packets that trigger invalid arguments in the emweb component. Affected software includes 4.2 (before 4.2.209.0) and 4.2M (before 4.2.207.54M), 5...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

CVE-2009-0062

CVE-2009-0062 concerns a privilege-escalation vulnerability in Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 WiSM modules, and Cisco Catalyst 3750 Integrated WLCs running software 4.2.173.0. The issue allows a remote authenticated user at the Lobby Admin or Local Management User leve...

CVE-2010-2842

Cisco WLC (Wireless LAN Controller) software, possibly 4.2–6.0, is affected by CVE-2010-2842 where remote authenticated users can bypass access restrictions and modify configuration, potentially gaining administrative privileges. The connected sources do not specify the exact vectors or root caus...

CVE-2010-3033

Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, is affected by a vulnerability that allows remote authenticated users to bypass access restrictions and modify configuration, potentially gaining administrative privileges. The connected documents indicate the issue is a sepa...

CVE-2013-1105

Cisco Wireless LAN Controllers (WLC) are affected for specific software trains: 7.0 before 7.0.235.3; 7.1; 7.2 before 7.2.111.3; and 7.3 before 7.3.101.0. The issue described as CVE-2013-1105 allows remote authenticated users to bypass wireless-management settings and read or modify the device co...

CVE-2017-12282

CVE-2017-12282 affects Cisco Wireless LAN Controllers (WLC) and relates to the ANQP ingress frame processing. The root cause is incomplete input validation of ANQP query frames, which can be exploited by an unauthenticated, Layer 2 RF-adjacent attacker on an RF-adjacent network to cause the affec...

CVE-2019-1797

Cisco Wireless LAN Controller (WLC) software contains a Cross-Site Request Forgery (CSRF) vulnerability in the web-based management interface. The issue arises from insufficient CSRF protections, allowing an unauthenticated attacker to lure a user into a crafted link and perform arbitrary actions...

CVE-2009-0061

CVE-2009-0061 affects Cisco Wireless LAN Controllers (WLCs), including the Cisco 4400 WLC, WiSM, and 3750 Integrated WLC. The vulnerability lies in the WLC’s TSEC driver and can allow remote attackers to cause a denial of service (device crash/hang) by sending certain IP packets. Affected softwar...

CVE-2010-2843

Cisco Wireless LAN Controller (WLC) software is listed as affected (likely versions 4.2 through 6.0). The CVE describes a vulnerability where remote authenticated users can bypass access restrictions and modify configuration, and potentially obtain administrative privileges, via unspecified vecto...

CVE-2013-1141

CVE-2013-1141 affects Cisco Wireless LAN Controller (WLC) devices running software 7.4.1.54 and earlier. The issue is in the mDNS snooping feature where improper buffer handling can be exploited by crafted mDNS packets to trigger a denial of service (device reload) by remote authenticated users. ...

CVE-2014-0701

Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...

CVE-2010-0574

CVE-2010-0574 corresponds to an IKE DoS vulnerability in Cisco Wireless LAN Controller (WLC) software. The issue allows remote attackers to cause a device reload by sending crafted IKE packets. Affected releases include 3.2.x before 3.2.215.0; 4.1 and 4.2 before 4.2.205.0 (and 4.1M/4.2M before 4....

CVE-2015-0679

The CVE-2015-0679 vulnerability affects Cisco Wireless LAN Controller (WLC) devices running 7.3(103.8) and 7.4(110.0). The issue arises in the web authentication feature where ill-formed/malformed passwords are mishandled, enabling an unauthenticated, adjacent attacker to trigger a denial-of-serv...

CVE-2015-0723

Cisco Wireless LAN Controller (WLC) firmware 7.5.x and 7.6.x before 7.6.120 is affected by a denial-of-service in the web authentication subsystem. The vulnerability stems from improper validation of user-supplied input, enabling an unauthenticated, adjacent attacker to craft a request that cause...

CVE-2015-4224

Cisco Wireless LAN Controller (WLC) running 7.0(240.0) is affected by CVE-2015-4224. The issue resides in the CLI processor, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary OS commands with elevated privileges via crafted CLI commands. I...

CVE-2016-1460

Cisco WLC vulnerability CVE-2016-1460 affects WLC firmware 7.4(121.0) and 8.0(0.30220.385). The flaw is in the wireless frame management service where insufficient handling of crafted wireless management frames could allow an unauthenticated, adjacent attacker to cause a DoS on the device. Impact...

CVE-2019-1800

CVE-2019-1800 affects Cisco Wireless LAN Controller Software: IAPP message handling vulnerabilities allow an unauthenticated adjacent attacker to trigger a DoS by sending crafted IAPP packets. Root cause is improper validation of fields within IAPP messages, and exploitation can cause the WLC to ...

CVE-2014-0705

The CVE-2014-0705 issue affects Cisco Wireless LAN Controllers (WLC) where the MLDv2 Snooping feature, when handling malformed IPv6 MLDv2 packets, can trigger a denial of service (device restart). Affected IOS/WLC versions are 7.2, 7.3, 7.4 prior to 7.4.121.0, and 7.5. Cisco released a security a...

CVE-2007-2036

CVE-2007-2036 refers to a vulnerability in the Cisco Wireless LAN Controller (WLC) where the SNMP implementation (pre-20070419) uses default read-only public and read-write private communities. This allows remote attackers to read and modify SNMP variables, potentially gaining full access to SNMP...

CVE-2018-0382

CVE-2018-0382 describes a vulnerability in Cisco Wireless LAN Controller (WLC) Software affecting the web-based interface session management. The issue arises because the software does not properly clear previously assigned session identifiers when a user authenticates, enabling an unauthenticate...

CVE-2018-0420

CVE-2018-0420 (Cisco WLC Dir Traversal) : A directory-traversal vulnerability exists in the web-based interface of Cisco Wireless LAN Controller Software due to improper sanitization of user-supplied input in HTTP parameters describing filenames/pathnames. An authenticated, remote attacker can su...

CVE-2010-3034

Cisco Wireless LAN Controller (WLC) software is affected by CVE-2010-3034, with claims of vulnerability to ACL bypass on the controller CPU. Affected versions are described as possibly 6.0.x or 4.1 through 6.0.x, and the issue enables remote attackers to bypass ACLs and send network traffic to un...

CVE-2007-2040

This CVE (CVE-2007-2040) affects Cisco Aironet 1000/1500 Lightweight Access Points, with hard-coded credentials allowing an attacker with physical access to perform arbitrary actions on the device. Affected firmware versions are before 3.2.185.0 for 1000/1500 lightweight APs and before 4.0.206.0 ...

CVE-2007-4011

CVE-2007-4011 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. The vulnerability permits remote DoS (traffic amplification or ARP storm) via crafted unicast ARP requests. Impact arises when the destination MAC is unknown to Layer-2 infrastructure (CSCsj69233) or durin...

CVE-2007-4012

CVE-2007-4012 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. Versions before 4.1.180.0 are vulnerable to a remote DoS caused by a broadcast ARP packet targeting the IP of a known client context (CSCsj50374). Impact: ARP storm; CVSS v2 base score 7.1 ( HIGH ). Remedi...