medium6.8Public exploit code
CVE-2012-5992
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hij…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities2012-12-13 · dos · hardware
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Wireless Lan Controller Software | Version 7.2.110.0 |
| Cisco | 2000 Wireless Lan Controller | All versions |
| Cisco | 2100 Wireless Lan Controller | All versions |
| Cisco | 2500 Wireless Lan Controller | All versions |
| Cisco | 4100 Wireless Lan Controller | All versions |
| Cisco | 4400 Wireless Lan Controller | All versions |
| Cisco | 5500 Wireless Lan Controller | All versions |
| Cisco | 7500 Wireless Lan Controller | All versions |
| Cisco | 8500 Wireless Lan Controller | All versions |