Description
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
Scores
EPSS
0.0132
EPSS Percentile
67.8%
Details
CWE
CWE-399
Status
published
Products (50)
cisco/2000_wireless_lan_controller
cisco/2100_wireless_lan_controller
cisco/2106_wireless_lan_controller
cisco/2112_wireless_lan_controller
cisco/2125_wireless_lan_controller
cisco/2500_wireless_lan_controller
cisco/2504_wireless_lan_controller
cisco/4100_wireless_lan_controller
cisco/4400_wireless_lan_controller
cisco/4402_wireless_lan_controller
... and 40 more
Published
Mar 01, 2012
Tracked Since
Feb 18, 2026