WL
Product
Wireless Lan Controller Software
88
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 17Medium 24Low 0
Watch
Add Wireless Lan Controller Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1363 | 9.8 | Apr 21 | Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED)… Affected: 7.2.0 before 7.4.140.0; 7.5.0 before 8.0.115.0 |
| CVE-2015-6314 | 9.8 | Jan 15 | Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via… Affected: 8.0.72.140; 8.0_base; 8.1.0; 8.1.104.37; 8.1.111.0; 8.1.122.0 |
| CVE-2019-1797 | 8.8 | Apr 18 | A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 8.3.150.0; 8.5.131.0 before 8.5.150.0; 8.7.106.0 before 8.8.100.0 |
| CVE-2017-3854 | 8.8 | Mar 15 | A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology Affected: 6.0199.4; 7.41.54; 7.0220.0; 7.0250.0; 16.088.0 |
| CVE-2024-20271 | 8.6 | Mar 27 | A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: before 8.10.190.0 |
| CVE-2020-3560 | 8.6 | Sep 24 | A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device Affected: before 8.5.161.0; 8.6 before 8.8.130.0 |
| CVE-2018-0252 | 8.6 | May 2 | A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an unauthenticated,… Affected: 8.4(100.0); 8.5(107.30); 8.5(107.41); 8.6(1.108) |
| CVE-2021-1419 | 7.8 | Sep 23 | A vulnerability in the SSH management feature of multiple Cisco Access Points (APs) platforms could allow a local, authenticated user to modify files on the affected device and… Affected: 8.10 before 8.10.151.0 |
| CVE-2018-0417 | 7.8 | Oct 17 | A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the… Affected: 8.7(1.115); before 8.2.170.0; 8.6 before 8.7.102.0 |
| CVE-2021-1437 | 7.5 | Mar 24 | A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential… Affected: 8.10.112.0 before 8.10.142.0 |
| CVE-2018-0382 | 7.5 | Apr 17 | A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated,… Affected: 8.1(111.0); 8.5(120.0) |
| CVE-2018-0443 | 7.5 | Oct 17 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an… Affected: 8.2(151.0) |
| CVE-2018-0442 | 7.5 | Oct 17 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an… Affected: before 8.2.170.0; 8.3 before 8.3.140.0; 8.4 before 8.5.110.0; 8.6 before 8.6.101.0; 8.7 before 8.7.102.0 |
| CVE-2017-12280 | 7.5 | Nov 2 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco Wireless LAN Controllers could allow an… Affected: All versions, or not specified |
| CVE-2016-9219 | 7.5 | Apr 6 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an unexpected… Affected: 8.3.102.0 |
| CVE-2016-1364 | 7.5 | Apr 21 | Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device… Affected: 7.4.1.54; 7.4.100; 7.4.110.0; 7.4.121.0; 7.5.102.0; 7.5.102.11; +3 more |
| CVE-2024-20354 | 7.4 | Mar 27 | A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of… Affected: 8.5.171.0 before 8.6.0.0; 8.10.130.0 before 8.10.190.81 |
| CVE-2018-0235 | 7.4 | May 2 | A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 8.6(1.106); 8.6(1.114) |
| CVE-2017-12275 | 7.4 | Nov 2 | A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could allow an unauthenticated,… Affected: All versions, or not specified |
| CVE-2023-20097 | 6.7 | Mar 23 | A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges Affected: before 8.10.183.0 |
| CVE-2021-1449 | 6.7 | Mar 24 | A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time Affected: before 8.5.171.0; 8.6 before 8.10.150.0 |
| CVE-2022-20769 | 6.5 | Sep 30 | Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability Affected: before 8.10.171.0 |
| CVE-2019-15276 | 6.5 | Nov 26 | A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS)… Affected: 8.4 before 8.10 |
| CVE-2019-1800 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3 before 8.5.150.0; 8.6 before 8.8.100.0 |
| CVE-2019-1799 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3.143.0 before 8.3.150.0; 8.5.103.0 before 8.5.131.0; 8.6.101.0 before 8.8.100.0 |
| CVE-2019-1796 | 6.5 | Apr 18 | A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3.143.0 before 8.5.150.0; 8.7.106.0 before 8.8.100.0 |
| CVE-2018-0420 | 6.5 | Oct 17 | A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information Affected: 8.2(151.0) |
| CVE-2016-1460 | 6.5 | Jul 28 | Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID… Affected: 7.4.121.0; 8.0.0.30220.385 |
| CVE-2017-12278 | 6.3 | Nov 2 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected… Affected: All versions, or not specified |
| CVE-2017-12282 | 6.1 | Nov 2 | A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2… Affected: All versions, or not specified |
| CVE-2023-20056 | 5.5 | Mar 23 | A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected… Affected: before 8.10.183.0 |
| CVE-2018-15395 | 5.4 | Oct 17 | A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, adjacent attacker to gain… Affected: 8.5(120.0) |
| CVE-2018-0416 | 5.3 | Oct 17 | A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under… Affected: 8.5(130.0); 8.9(1.52) |
| CVE-2018-0245 | 5.3 | May 2 | A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information… Affected: 8.3(133.0); 8.5(105.0) |
| CVE-2016-6375 | 5.3 | Sep 12 | Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service… Affected: 8.0.72.140 |
| CVE-2019-1830 | 4.9 | Apr 18 | A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device… Affected: before 8.3.150.0; 8.5.131.0 before 8.5.140.0; 8.6.101.0 before 8.8.100.0 |
| CVE-2018-0248 | 4.9 | Apr 17 | A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device… Affected: before 8.3.150.0; 8.4 before 8.5.140.0; 8.6 before 8.8.111.0 |
| CVE-2018-0388 | 4.8 | Oct 17 | A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 8.3(133.0); 8.3(135.0); 8.5(120.0) |
| CVE-2023-20268 | 4.7 | Sep 27 | A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected… Affected: before 8.10.190.0 |
| CVE-2018-0247 | 4.7 | May 2 | A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could allow an… Affected: 8.3(104.105) |
| CVE-2021-1423 | 4.4 | Mar 24 | A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of… Affected: before 8.5.171.0; 8.6 before 8.10.130.0 |
| CVE-2019-15266 | 4.4 | Oct 16 | A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted Affected: before 8.10 |
| CVE-2019-1805 | 4.3 | Apr 18 | A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an… Affected: 8.3(141.0) |
| CVE-2015-6341 | – | Oct 25 | The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cause a denial of service (client… Affected: 7.4.140.0; 8.0.120.0 |
| CVE-2015-6302 | – | Sep 26 | The RADIUS functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.0(250.0) and 7.0(252.0) allows remote attackers to disconnect arbitrary sessions via… Affected: 7.0.250.0; 7.0.252.0 |
| CVE-2015-6258 | – | Aug 22 | The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote attackers to trigger incorrect traffic… Affected: 8.1.104.37 |
| CVE-2015-4224 | – | Jun 26 | Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug… Affected: 7.0(240.0) |
| CVE-2015-4215 | – | Jun 24 | Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash) by triggering an exception… Affected: 7.5.102.0 |
| CVE-2015-0726 | – | May 16 | The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows… Affected: 7.0.98.0; 7.0.98.218; 7.0.116.0; 7.0.220.0; 7.0_base; 7.4.1.54; +6 more |
| CVE-2015-0723 | – | May 16 | The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service… Affected: 7.5.102.0; 7.5.102.11; 7.6.100.0 |