HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2012-0368

CVSS 7.8v2.0pub. 2012-03-01upd. 2026-04-29

The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Cisco 2000 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2100 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2106 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2112 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2125 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2500 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 2504 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 4100 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 4400 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 4402 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 4404 Wireless Lan Controller

    HW
    Cisco
    all versions

  • Cisco 5508 Wireless Controller

    HW
    Cisco
    all versions

  • Cisco Wireless Lan Controller Software

    OS
    Cisco
    4.04.0.1084.0.155.04.0.155.54.0.179.114.0.179.84.0.1964.0.206.04.0.217.04.0.219.04.14.1.171.04.1.181.04.1.185.04.1m+ 31 more
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2016-1363CRITICAL9.8PL ✓same product

Buffer overflow w Cisco WLC — zdalne wykonanie kodu przez HTTP

CVE-2015-6314CRITICAL9.8PL ✓same product

Cisco WLC — nieautoryzowana zmiana konfiguracji (Auth Bypass)

CVE-2024-20271HIGH8.6same product

A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated...

CVE-2022-20769HIGH7.4same product

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software cou...

CVE-2021-1419HIGH7.8same product

A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a lo...