Vulnerability in Cisco Wireless Lan Controller
CVE-2014-0703
Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.
Vulnerability class: Race Condition
EPSS: 0.020 (78.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Wireless_lan_controller
- Cisco Wireless_lan_controller_software — versions 7.4.100.0, 7.4.100.60
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)