CVE-2012-0371
https://notcve.org/view.php?id=CVE-2012-0371
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709. Dispositivos Cisco Wireless LAN Controller (WLC) son software v4.x, v5.x, v6.0, y 7.0 anteriores a v7.0.220.4, cuando está activada la opción CPU-based ACLs, permite a atacantes remotos leer y modificar la configuración a través de vectores no especificados, también conocido como Bug ID CSCtu56709. • http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2009-1165
https://notcve.org/view.php?id=CVE-2009-1165
Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789. Fuga de moria la plataforma Cisco Wireless LAN Controller (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y reinicio de dispositivo) a través de conexiones de administración SSH. También conocida como Bug ID CSCsw40789. • http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml http://www.securityfocus.com/bid/35817 http://www.securitytracker.com/id?1022605 http://www.vupen.com/english/advisories/2009/2021 • CWE-399: Resource Management Errors •
CVE-2009-1164
https://notcve.org/view.php?id=CVE-2009-1164
The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715. La interfaz web de administración en la plataforma Cisco Wireless LAN Controller (WLC) v4.x anterior a v4.2.205.0, v5.1 anterior a v5.1.163.0, y v5.0 y v5.2 anterior a v5.2.178.0, usado en Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una respuesta mal formada a peticiones de autenticación (1) HTTP o (2) HTTPS. También conocida como Bug ID CSCsx03715. • http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml http://www.vupen.com/english/advisories/2009/2021 • CWE-399: Resource Management Errors •
CVE-2009-1167
https://notcve.org/view.php?id=CVE-2009-1167
Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672. Vulnerabilidad sin especificar en la plataforma Cisco Wireless LAN Controller (WLC) v4.x anterior a v4.2.205.0 y v5.x anterior a v5.2.191.0, usado en Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, y 4400 Series Wireless Services Modules (WiSM), WLC Modules para Integrated Services Routers, y Catalyst 3750G Integrated Wireless LAN Controllers, permite a atacantes remotos modificar a configuración a través de peticiones (1) HTTP o (2) HTTPS, también conocido como Bug ID CSCsy44672. • http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml http://www.securitytracker.com/id?1022606 http://www.vupen.com/english/advisories/2009/2021 •
CVE-2009-0059
https://notcve.org/view.php?id=CVE-2009-0059
The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html. El Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), y Cisco Catalyst 3750 Integrated Wireless LAN Controller con software v4.x anterior a v4.2.176.0 y v5.2.x anterior a 5.2.157.0; permiten a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo) a través de una sesión de autenticación Web (también conocido WebAuth) que incluye una solicitud POST mal formada a login.html. • http://secunia.com/advisories/33749 http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml http://www.securityfocus.com/bid/33608 http://www.securitytracker.com/id?1021679 • CWE-20: Improper Input Validation •