CVE-2012-0368
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:2000_wireless_lan_controller
- cisco:2100_wireless_lan_controller
- cisco:2106_wireless_lan_controller
- cisco:2112_wireless_lan_controller
- cisco:2125_wireless_lan_controller
- cisco:2500_wireless_lan_controller
- cisco:2504_wireless_lan_controller
- cisco:4100_wireless_lan_controller
- cisco:4400_wireless_lan_controller
- cisco:4402_wireless_lan_controller
- cisco:4404_wireless_lan_controller
- cisco:5508_wireless_controller
- cisco:wireless_lan_controller_software
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc