Wireless Lan Controller Software vulnerabilities | LiveThreat CVE Feed

Product

Wireless Lan Controller Software

by Cisco · last CVE Mar 27, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities88 In the news0 Timeline

Severity mix

Critical 2High 17Medium 24Low 0

Severity

All severities88 Critical2 High17 Medium24 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Wireless Lan Controller Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-20097	6.7	0%	Mar 23	A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges Affected: before 8.10.183.0
CVE-2021-1449	6.7	0%	Mar 24	A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time Affected: before 8.5.171.0; 8.6 before 8.10.150.0
CVE-2022-20769	6.5	1%	Sep 30	Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability Affected: before 8.10.171.0
CVE-2019-15276	6.5	46%	Nov 26	A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service (DoS)… Affected: 8.4 before 8.10
CVE-2019-1800	6.5	1%	Apr 18	A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3 before 8.5.150.0; 8.6 before 8.8.100.0
CVE-2019-1799	6.5	1%	Apr 18	A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3.143.0 before 8.3.150.0; 8.5.103.0 before 8.5.131.0; 8.6.101.0 before 8.8.100.0
CVE-2019-1796	6.5	1%	Apr 18	A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to… Affected: 8.3.143.0 before 8.5.150.0; 8.7.106.0 before 8.8.100.0
CVE-2018-0420	6.5	5%	Oct 17	A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information Affected: 8.2(151.0)
CVE-2016-1460	6.5	1%	Jul 28	Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID… Affected: 7.4.121.0; 8.0.0.30220.385
CVE-2017-12278	6.3	2%	Nov 2	A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected… Affected: All versions, or not specified
CVE-2017-12282	6.1	1%	Nov 2	A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could allow an unauthenticated, Layer 2… Affected: All versions, or not specified
CVE-2023-20056	5.5	0%	Mar 23	A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected… Affected: before 8.10.183.0
CVE-2018-15395	5.4	1%	Oct 17	A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, adjacent attacker to gain… Affected: 8.5(120.0)
CVE-2018-0416	5.3	3%	Oct 17	A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under… Affected: 8.5(130.0); 8.9(1.52)
CVE-2018-0245	5.3	2%	May 2	A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information… Affected: 8.3(133.0); 8.5(105.0)
CVE-2016-6375	5.3	1%	Sep 12	Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service… Affected: 8.0.72.140
CVE-2019-1830	4.9	1%	Apr 18	A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device… Affected: before 8.3.150.0; 8.5.131.0 before 8.5.140.0; 8.6.101.0 before 8.8.100.0
CVE-2018-0248	4.9	2%	Apr 17	A vulnerability in the administrative GUI configuration feature of Cisco Wireless LAN Controller (WLC) Software could allow an aUTHENTICated, remote attacker to cause the device… Affected: before 8.3.150.0; 8.4 before 8.5.140.0; 8.6 before 8.8.111.0
CVE-2018-0388	4.8	1%	Oct 17	A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 8.3(133.0); 8.3(135.0); 8.5(120.0)
CVE-2023-20268	4.7	0%	Sep 27	A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected… Affected: before 8.10.190.0
CVE-2018-0247	4.7	1%	May 2	A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access Points running Cisco IOS Software could allow an… Affected: 8.3(104.105)
CVE-2021-1423	4.4	0%	Mar 24	A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of… Affected: before 8.5.171.0; 8.6 before 8.10.130.0
CVE-2019-15266	4.4	1%	Oct 16	A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted Affected: before 8.10
CVE-2019-1805	4.3	1%	Apr 18	A vulnerability in certain access control mechanisms for the Secure Shell (SSH) server implementation for Cisco Wireless LAN Controller (WLC) Software could allow an… Affected: 8.3(141.0)