Cisco 4400 Wireless Lan Controller vulnerabilities

16 CVEs affecting Cisco 4400 Wireless Lan Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1235, published 2013-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-5991, published 2012-12-19. Medium severity, CVSS 6.3. EPSS: 5.5% chance of exploitation in the next 30 days. screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain…
CVE-2013-1104, published 2013-01-24. High severity, CVSS 9.0. EPSS: 3.7% chance of exploitation in the next 30 days. The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent…
CVE-2012-6007, published 2012-12-19. Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject…
CVE-2009-0059, published 2009-02-05. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x…
CVE-2013-1103, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload)…
CVE-2013-1102, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0…
CVE-2012-5992, published 2012-12-19. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators…
CVE-2012-0369, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (device…
CVE-2009-0061, published 2009-02-05. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated…
CVE-2012-0371, published 2012-03-01. High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via…

Latest

CVE-2013-1235, published 2013-05-04. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage)…
CVE-2012-0370, published 2012-03-01. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0, when WebAuth is enabled, allow remote attackers to cause a denial of service…