Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoWireless Lan Controller*

21 matches found

CVE
CVE•added 2013/05/04 3:24 a.m.•66 views

CVE-2013-1235

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507.

5CVSS7AI score0.00474EPSS
CVE
CVE•added 2020/09/24 6:15 p.m.•63 views

CVE-2020-3560

A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper resource management while processing specific packets. An attacker could exploit this vulnerability by ...

8.6CVSS8.5AI score0.01156EPSS
CVE
CVE•added 2018/10/17 10:29 p.m.•60 views

CVE-2018-0417

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific T...

7.8CVSS7.8AI score0.00495EPSS
CVE
CVE•added 2019/04/18 1:29 a.m.•54 views

CVE-2019-1796

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on f...

7.4CVSS6.5AI score0.00145EPSS
CVE
CVE•added 2014/03/06 11:55 a.m.•49 views

CVE-2014-0703

Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server ...

10CVSS6.8AI score0.00931EPSS
CVE
CVE•added 2014/03/06 11:55 a.m.•48 views

CVE-2014-0704

The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) via a crafted field in an IGMPv3 message, aka Bu...

7.1CVSS6.7AI score0.00399EPSS
CVE
CVE•added 2019/04/18 1:29 a.m.•48 views

CVE-2019-1799

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on f...

7.4CVSS6.5AI score0.00145EPSS
CVE
CVE•added 2013/11/22 7:55 p.m.•45 views

CVE-2013-6698

The web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka ...

4.3CVSS6.7AI score0.00217EPSS
CVE
CVE•added 2013/02/28 11:55 p.m.•44 views

CVE-2013-1141

The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID CSCue04153.

6.1CVSS6.6AI score0.00158EPSS
CVE
CVE•added 2014/03/06 11:55 a.m.•44 views

CVE-2014-0707

Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCuf80681.

7.8CVSS6.8AI score0.00427EPSS
CVE
CVE•added 2020/09/24 6:15 p.m.•44 views

CVE-2020-3552

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit th...

7.4CVSS7.4AI score0.00101EPSS
CVE
CVE•added 2014/03/06 11:55 a.m.•43 views

CVE-2014-0706

Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID CSCue87929.

7.8CVSS6.8AI score0.00427EPSS
CVE
CVE•added 2014/06/08 4:55 p.m.•42 views

CVE-2014-3291

Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321.

5.7CVSS6.9AI score0.00535EPSS
CVE
CVE•added 2019/04/18 1:29 a.m.•40 views

CVE-2019-1800

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability exist because the software improperly validates input on f...

7.4CVSS6.5AI score0.00145EPSS
CVE
CVE•added 2020/09/24 6:15 p.m.•40 views

CVE-2020-3559

A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending a...

8.6CVSS7.4AI score0.01276EPSS
CVE
CVE•added 2014/03/06 11:55 a.m.•39 views

CVE-2014-0705

The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233.

7.1CVSS6.8AI score0.00399EPSS
CVE
CVE•added 2013/10/03 11:4 a.m.•37 views

CVE-2013-5519

Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810.

4.3CVSS5.8AI score0.00357EPSS
CVE
CVE•added 2015/02/19 12:59 a.m.•36 views

CVE-2015-0622

The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861.

7.1CVSS6.9AI score0.00203EPSS
CVE
CVE•added 2013/11/13 3:55 p.m.•35 views

CVE-2013-6684

The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCuh81011.

6.8CVSS6.4AI score0.00115EPSS
CVE
CVE•added 2013/08/30 8:55 p.m.•34 views

CVE-2013-3474

The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a reque...

6.3CVSS6.5AI score0.00519EPSS
CVE
CVE•added 2013/11/22 7:55 p.m.•28 views

CVE-2013-6699

The Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880.

5CVSS7.1AI score0.00474EPSS