Vulnerabilities > Cisco > 4400 Wireless LAN Controller

DATE CVE VULNERABILITY TITLE RISK
2013-05-04 CVE-2013-1235 Remote Denial of Service vulnerability in Cisco Wireless LAN Controller
Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507.
network
low complexity
cisco
5.0
2013-01-24 CVE-2013-1104 Multiple Security vulnerability in Cisco Wireless LAN Controller
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
network
low complexity
cisco
critical
9.0
2013-01-24 CVE-2013-1103 Multiple Security vulnerability in Cisco Wireless LAN Controller
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload) via crafted SIP packets, aka Bug ID CSCts87659.
network
low complexity
cisco
7.8
2013-01-24 CVE-2013-1102 Multiple Security vulnerability in Cisco Wireless LAN Controller
The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743.
network
low complexity
cisco
7.8
2012-12-19 CVE-2012-6007 Cross-Site Scripting vulnerability in Cisco products
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992.
network
cisco CWE-79
4.3
2012-12-19 CVE-2012-5992 Cross-Site Request Forgery (CSRF) vulnerability in Cisco products
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.
network
cisco CWE-352
6.8
2012-12-19 CVE-2012-5991 Unspecified vulnerability in Cisco products
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209.
network
cisco
6.3
2012-03-01 CVE-2012-0371 Permissions, Privileges, and Access Controls vulnerability in Cisco products
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709.
network
cisco CWE-264
critical
9.3
2012-03-01 CVE-2012-0370 Resource Management Errors vulnerability in Cisco products
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.
network
low complexity
cisco CWE-399
7.8
2012-03-01 CVE-2012-0369 Resource Management Errors vulnerability in Cisco products
Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets, aka Bug ID CSCtt07949.
network
low complexity
cisco CWE-399
7.8