Vulnerability in Cisco 2000 Wireless Lan Controller
CVE-2012-0368
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco 2000_wireless_lan_controller
- Cisco 2100_wireless_lan_controller
- Cisco 2106_wireless_lan_controller
- Cisco 2112_wireless_lan_controller
- Cisco 2125_wireless_lan_controller
- Cisco 2500_wireless_lan_controller
- Cisco 2504_wireless_lan_controller
- Cisco 4100_wireless_lan_controller
- Cisco 4400_wireless_lan_controller
- Cisco 4402_wireless_lan_controller
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (mailing-list, x_refsource_BUGTRAQ)