CVE-2013-1105
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.
- Score
- CVSS 2.0 9.0 Critical
- Status
- Modified - psirt@cisco.com
- Published
- 2013-01-24
- Last modified
- 2024-08-06
- Weaknesses
- CWE-264
Affected products
- 2000 Wireless Lan Controller (Cisco)
- 2100 Wireless Lan Controller (Cisco)
- 2500 Wireless Lan Controller (Cisco)
- 5500 Wireless Lan Controller (Cisco)
- 7500 Wireless Lan Controller (Cisco)
- 8500 Wireless Lan Controller (Cisco)
- Wireless Lan Controller Software (Cisco)
References
- http://osvdb.org/89532
- http://secunia.com/advisories/51965
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc
- http://www.securityfocus.com/bid/57524
- http://www.securitytracker.com/id/1028027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81490
