Cisco Wireless Lan Controller vulnerabilities

26 CVEs affecting Cisco Wireless Lan Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3560, published 2020-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0417, published 2018-10-17. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not…
CVE-2016-9195, published 2017-04-07. Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2014-0703, published 2014-03-06. High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers…
CVE-2014-0705, published 2014-03-06. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause…
CVE-2015-0622, published 2015-02-19. High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days. The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage) via crafted packets that…
CVE-2020-3560, published 2020-09-24. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affected device. The vulnerability is due to improper…
CVE-2020-3559, published 2020-09-24. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Aironet Access Point (AP) Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of…
CVE-2014-0707, published 2014-03-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet frame, aka Bug ID…
CVE-2014-0706, published 2014-03-06. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4.110.0 allow remote attackers to cause a denial of service (device restart) via a crafted 802.11 Ethernet…
CVE-2013-3474, published 2013-08-30. Medium severity, CVSS 6.3. EPSS: 1.2% chance of exploitation in the next 30 days. The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full…

Latest

CVE-2020-3552, published 2020-09-24. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an…
CVE-2019-1800, published 2019-04-18. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2019-1799, published 2019-04-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2019-1796, published 2019-04-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of…
CVE-2016-9194, published 2017-04-06. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a…
CVE-2016-6376, published 2016-09-02. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows…