Cisco 7500 Wireless Lan Controller vulnerabilities

8 CVEs affecting Cisco 7500 Wireless Lan Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1235, published 2013-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-5991, published 2012-12-19. Medium severity, CVSS 6.3. EPSS: 5.5% chance of exploitation in the next 30 days. screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain…
CVE-2013-1104, published 2013-01-24. High severity, CVSS 9.0. EPSS: 3.7% chance of exploitation in the next 30 days. The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent…
CVE-2012-6007, published 2012-12-19. Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject…
CVE-2013-1105, published 2013-01-24. High severity, CVSS 9.0. EPSS: 3.1% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management…
CVE-2013-1103, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service (Access Point reload)…
CVE-2013-1102, published 2013-01-24. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3 before 7.3.101.0…
CVE-2012-5992, published 2012-12-19. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators…
CVE-2013-1235, published 2013-05-04. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage)…