Cisco 2500 Wireless Lan Controller vulnerabilities

12 CVEs affecting Cisco 2500 Wireless Lan Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1235, published 2013-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-5991, published 2012-12-19. Medium severity, CVSS 6.3. EPSS: 5.5% chance of exploitation in the next 30 days. screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain…
CVE-2013-1104, published 2013-01-24. High severity, CVSS 9.0. EPSS: 3.7% chance of exploitation in the next 30 days. The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent…
CVE-2012-6007, published 2012-12-19. Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject…
CVE-2013-1105, published 2013-01-24. High severity, CVSS 9.0. EPSS: 3.1% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management…
CVE-2013-1103, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload)…
CVE-2013-1102, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0…
CVE-2012-5992, published 2012-12-19. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators…
CVE-2012-0369, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device…
CVE-2012-0371, published 2012-03-01. High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via…
CVE-2013-1235, published 2013-05-04. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage)…

Latest

CVE-2012-0370, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service…