CVE-2013-1141

Cisco Wireless LAN Controller Software < 7.4.1.54 - Authenticated Denial of Service via mDNS Snooping

Title source: llm

Description

The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID CSCue04153.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=28417

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1141

Scores

EPSS 0.0057

EPSS Percentile 43.0%

Details

CWE

CWE-119

Status published

Products (50)

cisco/wireless_lan_controller

cisco/wireless_lan_controller_software 3.0

cisco/wireless_lan_controller_software 3.2

cisco/wireless_lan_controller_software 3.2.116.21

cisco/wireless_lan_controller_software 4.0

cisco/wireless_lan_controller_software 4.0.108

cisco/wireless_lan_controller_software 4.0.155.0

cisco/wireless_lan_controller_software 4.0.155.5

cisco/wireless_lan_controller_software 4.0.179.8

cisco/wireless_lan_controller_software 4.0.179.11

... and 40 more

Published Feb 28, 2013

Tracked Since Feb 18, 2026