WL
Product
Wireless Lan Controller
26
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 6Low 0
Watch
Add Wireless Lan Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3560 | 8.6 | Sep 24 | A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device Affected: 8.9 before 8.10.112.0 |
| CVE-2020-3559 | 8.6 | Sep 24 | A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload Affected: 8.9 before 8.10.112.0 |
| CVE-2018-0417 | 7.8 | Oct 17 | A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the… Affected: 8.4 before 8.5.131.0 |
| CVE-2020-3552 | 7.4 | Sep 24 | A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS)… Affected: 8.6 before 8.10.105.0 |
| CVE-2019-1800 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: before 8.2.170.0 |
| CVE-2019-1799 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: before 8.2.170.0 |
| CVE-2019-1796 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: before 8.2.170.0 |
| CVE-2016-9194 | 6.5 | Apr 6 | A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent… Affected: 5.2.157.0; 5.2.169.0; 6.0_base; 7.0_base; 7.1_base; 7.2_base; +30 more |
| CVE-2016-6376 | 6.5 | Sep 2 | The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x… Affected: 3.0_base; 3.1.59.24; 3.1.105.0; 3.1.111.0; 3.2.78.0; 3.2.116.21; +34 more |
| CVE-2016-9195 | 5.3 | Apr 7 | A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, remote attacker to cause a… Affected: 8.3.102.0 |
| CVE-2015-6311 | – | Oct 8 | Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending… Affected: 7.0(240.0); 7.3(101.0); 7.4(1.19) |
| CVE-2015-0756 | – | May 29 | Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the… Affected: 7.4(1.1) |
| CVE-2015-0622 | – | Feb 19 | The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via… Affected: All versions, or not specified |
| CVE-2014-3291 | – | Jun 8 | Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery… Affected: All versions, or not specified |
| CVE-2014-0707 | – | Mar 6 | Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet… Affected: All versions, or not specified |
| CVE-2014-0706 | – | Mar 6 | Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted… Affected: All versions, or not specified |
| CVE-2014-0705 | – | Mar 6 | The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows… Affected: All versions, or not specified |
| CVE-2014-0704 | – | Mar 6 | The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote… Affected: All versions, or not specified |
| CVE-2014-0703 | – | Mar 6 | Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which… Affected: All versions, or not specified |
| CVE-2013-6699 | – | Nov 22 | The Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-6698 | – | Nov 22 | The web interface on Cisco Wireless LAN Controller (WLC) devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct… Affected: All versions, or not specified |
| CVE-2013-6684 | – | Nov 13 | The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote authenticated users to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-5519 | – | Oct 3 | Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML… Affected: All versions, or not specified |
| CVE-2013-3474 | – | Aug 30 | The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging… Affected: All versions, or not specified |
| CVE-2013-1235 | – | May 4 | Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2013-1141 | – | Feb 28 | The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote… Affected: All versions, or not specified |
Showing 26