Cisco 2504 Wireless Lan Controller vulnerabilities

5 CVEs affecting Cisco 2504 Wireless Lan Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1235, published 2013-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0369, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device…
CVE-2012-0371, published 2012-03-01. High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via…
CVE-2013-1235, published 2013-05-04. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage)…
CVE-2012-0370, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service…
CVE-2012-0368, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows…