Vulnerabilities > Cisco > Wireless LAN Controller Software > High

DATE CVE VULNERABILITY TITLE RISK
2017-11-02 CVE-2017-12280 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco Wireless LAN Controller Software
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-119
7.5
2017-11-02 CVE-2017-12275 Improper Input Validation vulnerability in Cisco Wireless LAN Controller Software
A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
low complexity
cisco CWE-20
7.4
2017-04-06 CVE-2016-9219 Improper Input Validation vulnerability in Cisco products
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device.
network
low complexity
cisco CWE-20
7.5
2017-03-15 CVE-2017-3854 Improper Authentication vulnerability in Cisco products
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology.
low complexity
cisco CWE-287
8.8
2016-04-21 CVE-2016-1364 Improper Input Validation vulnerability in Cisco Wireless LAN Controller Software
Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.
network
low complexity
cisco CWE-20
7.5