Unscored severity · published Mar 1, 2012
CVE-2012-0368
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2W
2000 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2100 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2106 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2112 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2125 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2500 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
2W
2504 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
4W
4100 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
4W
4400 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
4W
4402 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
4W
4404 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
5W
5508 Wireless Controller · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0368
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0368
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
More from 2000 Wireless Lan Controller
–
CVE-2013-1235
Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of…
–
CVE-2013-1105
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass…
–
CVE-2013-1104
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted…
–
CVE-2013-1103
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service…
–
CVE-2013-1102
The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3…