CVE-2012-0370
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets, aka Bug ID CSCtt47435.
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:2000_wireless_lan_controller
- cisco:2100_wireless_lan_controller
- cisco:2106_wireless_lan_controller
- cisco:2112_wireless_lan_controller
- cisco:2125_wireless_lan_controller
- cisco:2500_wireless_lan_controller
- cisco:2504_wireless_lan_controller
- cisco:4100_wireless_lan_controller
- cisco:4400_wireless_lan_controller
- cisco:4402_wireless_lan_controller
- cisco:4404_wireless_lan_controller
- cisco:5508_wireless_controller
- cisco:wireless_lan_controller_software
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc