critical9.0
CVE-2013-1104
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary …
Impact
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | 2000 Wireless Lan Controller | All versions |
| Cisco | 2100 Wireless Lan Controller | All versions |
| Cisco | 2500 Wireless Lan Controller | All versions |
| Cisco | 4100 Wireless Lan Controller | All versions |
| Cisco | 4400 Wireless Lan Controller | All versions |
| Cisco | 5500 Wireless Lan Controller | All versions |
| Cisco | 7500 Wireless Lan Controller | All versions |
| Cisco | 8500 Wireless Lan Controller | All versions |
| Cisco | Wireless Lan Controller Software | Version 7.3.101.0 |
References
- NVD record
- CVE.org record
- http://osvdb.org/89533
- http://secunia.com/advisories/51965
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc
- http://www.securityfocus.com/bid/57524
- http://www.securitytracker.com/id/1028027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81489
- http://osvdb.org/89533
- http://secunia.com/advisories/51965
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc
- http://www.securityfocus.com/bid/57524
- http://www.securitytracker.com/id/1028027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81489