CVSS: 9.0EPSS: 1%CPEs: 9EXPL: 0CVE-2013-1104
https://notcve.org/view.php?id=CVE-2013-1104
24 Jan 2013 — The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636. La funcionalidad de perfiles HTTP en Cisco Wireless LAN Controller (WLC) de los dispositivos con software v7.3.101.0 permite a usuarios remotos autenticados ejecutar código arbitrario a través de una cabecera manipulada HTTP User-Agent, también conocido como Bug ID CSCuc15636. • http://osvdb.org/89533 •
CVSS: 9.0EPSS: 0%CPEs: 14EXPL: 0CVE-2013-1105
https://notcve.org/view.php?id=CVE-2013-1105
24 Jan 2013 — Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653. Dispositivos Cisco Wireless LAN Controller (WLC) con software v7.0 anterior a v7.0.235.3, v7.1 y v7.2 anterior a v7.2.111.3, y v7.3 anterior a v7.3.101.0, permite a usuarios remotos autentificados saltarse las configu... • http://osvdb.org/89532 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.5EPSS: 4%CPEs: 9EXPL: 2CVE-2012-5991 – Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2012-5991
19 Dec 2012 — screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209. screens/base/web_auth_custom.html en dispositivos Cisco Wireless LAN Controller (WLC) con software v7.2.110.0 permiten a usuarios remotos autenticados causar una denegación de servicio (reinicio del dispositivo) a través de un cierto ... • https://www.exploit-db.com/exploits/23361 •
CVSS: 9.6EPSS: 0%CPEs: 9EXPL: 2CVE-2012-5992 – Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2012-5992
19 Dec 2012 — Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283. Múltiples vulnerabilidades de falsificación de peticiones en sitios cruzados (CSRF) en dispositivos Cisco Wir... • https://www.exploit-db.com/exploits/23361 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 5.4EPSS: 1%CPEs: 9EXPL: 2CVE-2012-6007 – Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2012-6007
19 Dec 2012 — Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en screens/base/web_auth_custom.html en dispositivos Cisco Wireless LAN Controller (WLC) con software v7.2.110.0 permite a u... • https://www.exploit-db.com/exploits/23361 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 0%CPEs: 58EXPL: 0CVE-2012-0368
https://notcve.org/view.php?id=CVE-2012-0368
01 Mar 2012 — The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997. El interface de gestión administrativa en dispositivos Cisco Wireless LAN Controller (WLC) con software v4.x, v5.x, v6.0, y v7.0 anterior a v7.0.220.0, v7.1 anteriores a v7.1.91.0, y v7.2 anter... • http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 22EXPL: 0CVE-2012-0369
https://notcve.org/view.php?id=CVE-2012-0369
01 Mar 2012 — Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device reload) via a sequence of IPv6 packets, aka Bug ID CSCtt07949. Dispositivos Cisco Wireless LAN Controller (WLC) con software v6.0 y v7.0 anteriores a v7.0.220.0, 7.1 anteriores a v7.1.91.0, y v7.2 anteriores a v7.2.103.0 permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través... • http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 58EXPL: 0CVE-2012-0370
https://notcve.org/view.php?id=CVE-2012-0370
01 Mar 2012 — Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435. Dispositivos Cisco Wireless LAN Controller (WLC) con software 4v.x, v5.x, v6.0, y v7.0 anteriores a v7.0.220.0 y 7.1 anteriores a v7.1.91.0, cuando está activado WebAuth, permite a atacantes remotos provocar una denegación d... • http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 0%CPEs: 56EXPL: 0CVE-2012-0371
https://notcve.org/view.php?id=CVE-2012-0371
01 Mar 2012 — Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709. Dispositivos Cisco Wireless LAN Controller (WLC) son software v4.x, v5.x, v6.0, y 7.0 anteriores a v7.0.220.4, cuando está activada la opción CPU-based ACLs, permite a atacantes remotos leer y modificar la configuración a través de vectores no especificados, también conoci... • http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 41%CPEs: 6EXPL: 1CVE-2011-1613 – Cisco DPC2100 - Denial of Service
https://notcve.org/view.php?id=CVE-2011-1613
03 May 2011 — Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426. Vulnerabilidad no especificada en el software Cisco Wireless LAN Controller (WLC) v6.0 antes de v6.0.200.0, v7.0 antes de v7.0.98.216 y v7.0.1xx antes de v7.0.112.0 permite a atacantes remotos provocar una denegación de servicio (recarga de... • https://www.exploit-db.com/exploits/21523 •