CVE-2009-1164
Cisco Wireless LAN Controller 4.2-4.2.205.0 & 5.x-5.2.178.0 DoS via Malformed HTTP/HTTPS Auth
Title source: llmDescription
The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.
References (2)
Core 2
Core References
Patch, Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2021
Scores
EPSS
0.0135
EPSS Percentile
68.7%
Details
CWE
CWE-399
Status
published
Products (25)
cisco/catalyst_3750g
cisco/cisco_1500_wireless_lan_controller
4.2
cisco/cisco_1500_wireless_lan_controller
5.0
cisco/cisco_1500_wireless_lan_controller
5.1
cisco/cisco_1500_wireless_lan_controller
5.2
cisco/cisco_2000_wireless_lan_controller
4.2
cisco/cisco_2000_wireless_lan_controller
5.0
cisco/cisco_2000_wireless_lan_controller
5.1
cisco/cisco_2000_wireless_lan_controller
5.2
cisco/cisco_2100_wireless_lan_controller
4.2
... and 15 more
Published
Jul 29, 2009
Tracked Since
Feb 18, 2026