high7.8
CVE-2012-0368
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91…
Impact
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Wireless Lan Controller Software | Versions 4.0, 4.0.108, 4.0.155.0, 4.0.155.5, 4.0.179.8, 4.0.179.11 |
| Cisco | 2000 Wireless Lan Controller | All versions |
| Cisco | 2100 Wireless Lan Controller | All versions |
| Cisco | 2106 Wireless Lan Controller | All versions |
| Cisco | 2112 Wireless Lan Controller | All versions |
| Cisco | 2125 Wireless Lan Controller | All versions |
| Cisco | 2500 Wireless Lan Controller | All versions |
| Cisco | 2504 Wireless Lan Controller | All versions |
| Cisco | 4100 Wireless Lan Controller | All versions |
| Cisco | 4400 Wireless Lan Controller | All versions |
| Cisco | 4402 Wireless Lan Controller | All versions |
| Cisco | 4404 Wireless Lan Controller | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc