Vulnerabilities > Cisco > Wireless LAN Controller Software > 5.2

DATE CVE VULNERABILITY TITLE RISK
2012-03-01 CVE-2012-0368 Resource Management Errors vulnerability in Cisco products
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
network
low complexity
cisco CWE-399
7.8
2010-09-10 CVE-2010-3033 Permissions, Privileges, and Access Controls vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-2843.
network
low complexity
cisco CWE-264
critical
9.0
2010-09-10 CVE-2010-2843 Permissions, Privileges, and Access Controls vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2842 and CVE-2010-3033.
network
low complexity
cisco CWE-264
critical
9.0
2010-09-10 CVE-2010-2842 Permissions, Privileges, and Access Controls vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) software, possibly 4.2 through 6.0, allows remote authenticated users to bypass intended access restrictions and modify the configuration, and possibly obtain administrative privileges, via unspecified vectors, a different vulnerability than CVE-2010-2843 and CVE-2010-3033.
network
low complexity
cisco CWE-264
critical
9.0
2010-09-10 CVE-2010-0574 Unspecified vulnerability in Cisco Wireless LAN Controller Software
Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 3.2 before 3.2.215.0; 4.1 and 4.2 before 4.2.205.0; 4.1M and 4.2M before 4.2.207.54M; 5.0, 5.1, and 6.0 before 6.0.188.0; and 5.2 before 5.2.193.11 allows remote attackers to cause a denial of service (device reload) via a crafted IKE packet, aka Bug ID CSCta56653.
network
low complexity
cisco
7.8
2009-02-05 CVE-2009-0059 Improper Input Validation vulnerability in Cisco products
The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html.
network
low complexity
cisco CWE-20
7.8
2009-02-05 CVE-2009-0058 Improper Input Validation vulnerability in Cisco products
The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service (web authentication outage or device reload) via unspecified network traffic, as demonstrated by a vulnerability scanner.
low complexity
cisco CWE-20
6.1