Page 8 of 63 results (0.006 seconds)

CVSS: 7.8EPSS: 1%CPEs: 13EXPL: 0

CVE-2013-1103

https://notcve.org/view.php?id=CVE-2013-1103

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload) via crafted SIP packets, aka Bug ID CSCts87659. Cisco Wireless LAN Controller (WLC) son software v7.0 anterior a v7.0.220.0, v7.1 anterior a v7.1.91.0, y v7.2 anterior a v7.2.103.0 permite a atacantes remotos generar una denegación de servicio (reinicio del punto de acceso) mediante paquetes SIP especialmente diseñados, también conocido como Bug ID CSCts87659. • http://osvdb.org/89530 http://secunia.com/advisories/51965 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc http://www.securityfocus.com/bid/57524 http://www.securitytracker.com/id/1028027 •

CVSS: 9.0EPSS: 0%CPEs: 14EXPL: 0

CVE-2013-1105

https://notcve.org/view.php?id=CVE-2013-1105

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653. Dispositivos Cisco Wireless LAN Controller (WLC) con software v7.0 anterior a v7.0.235.3, v7.1 y v7.2 anterior a v7.2.111.3, y v7.3 anterior a v7.3.101.0, permite a usuarios remotos autentificados saltarse las configuraciones wireless-management y leer o modificar la configuración del dispositivo a través de una petición SNMP, también conocido como Bug ID CSCua60653. • http://osvdb.org/89532 http://secunia.com/advisories/51965 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc http://www.securityfocus.com/bid/57524 http://www.securitytracker.com/id/1028027 https://exchange.xforce.ibmcloud.com/vulnerabilities/81490 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0

CVE-2013-1102

https://notcve.org/view.php?id=CVE-2013-1102

The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0 allows remote attackers to cause a denial of service (device reload) via crafted IP packets, aka Bug ID CSCtx80743. El sistema de prevención de intrusiones inalámbricas (WIPS) de Cisco Wireless LAN Controller (WLC) de los dispositivos con software v7.0 antes de v7.0.235.0, v7.1 y v7.2 antes de v7.2.110.0 y v7.3 antes de v7.3.101.0 permite a atacantes remotos provocar una denegación de servicios (dispositivo de recarga) a través de paquetes IP manipulados, ID de error alias CSCtx80743. • http://secunia.com/advisories/51965 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc http://www.securityfocus.com/bid/57524 http://www.securitytracker.com/id/1028027 •

CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 2

CVE-2012-6007 – Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2012-6007

Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en screens/base/web_auth_custom.html en dispositivos Cisco Wireless LAN Controller (WLC) con software v7.2.110.0 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través del parámetro 'title'. Se trata de un problema también conocido como Bug ID CSCud65187 . Se trata de una vulnerabilidad diferente a CVE-2012-5992a. • https://www.exploit-db.com/exploits/23361 http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.8EPSS: 0%CPEs: 9EXPL: 2

CVE-2012-5992 – Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2012-5992

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser_create.html or (2) insert XSS sequences via the headline parameter to screens/base/web_auth_custom.html, aka Bug ID CSCud50283. Múltiples vulnerabilidades de falsificación de peticiones en sitios cruzados (CSRF) en dispositivos Cisco Wireless LAN Controller (WLC) con software v7.2.110.0 permiten a atacantes remotos secuestrar la autenticación de los administradores de las solicitudes que (1) agregan cuentas de administración a través de screens/aaa/mgmtuser_create.html o (2) insertan secuencias XSS a través del parámetro 'headline' para screens/base/web_auth_custom.html. También conocido como Bug ID CSCud50283. • https://www.exploit-db.com/exploits/23361 http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.html • CWE-352: Cross-Site Request Forgery (CSRF) •