The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireless_lan_controller_software | Cisco | 4.0 (including) | 4.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.108 (including) | 4.0.108 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.155.0 (including) | 4.0.155.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.155.5 (including) | 4.0.155.5 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.179.8 (including) | 4.0.179.8 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.179.11 (including) | 4.0.179.11 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.196 (including) | 4.0.196 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.206.0 (including) | 4.0.206.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.217.0 (including) | 4.0.217.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.0.219.0 (including) | 4.0.219.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.1 (including) | 4.1 (including) |
| Wireless_lan_controller_software | Cisco | 4.1.171.0 (including) | 4.1.171.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.1.181.0 (including) | 4.1.181.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.1.185.0 (including) | 4.1.185.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.1m (including) | 4.1m (including) |
| Wireless_lan_controller_software | Cisco | 4.2 (including) | 4.2 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.61.0 (including) | 4.2.61.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.99.0 (including) | 4.2.99.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.112.0 (including) | 4.2.112.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.117.0 (including) | 4.2.117.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.130.0 (including) | 4.2.130.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.173.0 (including) | 4.2.173.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.174.0 (including) | 4.2.174.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.176.0 (including) | 4.2.176.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2.182.0 (including) | 4.2.182.0 (including) |
| Wireless_lan_controller_software | Cisco | 4.2m (including) | 4.2m (including) |
| Wireless_lan_controller_software | Cisco | 5.0 (including) | 5.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.0.148.0 (including) | 5.0.148.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.0.148.2 (including) | 5.0.148.2 (including) |
| Wireless_lan_controller_software | Cisco | 5.1 (including) | 5.1 (including) |
| Wireless_lan_controller_software | Cisco | 5.1.151.0 (including) | 5.1.151.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.1.152.0 (including) | 5.1.152.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.1.160.0 (including) | 5.1.160.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.2 (including) | 5.2 (including) |
| Wireless_lan_controller_software | Cisco | 5.2.157.0 (including) | 5.2.157.0 (including) |
| Wireless_lan_controller_software | Cisco | 5.2.169.0 (including) | 5.2.169.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0 (including) | 6.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0.182.0 (including) | 6.0.182.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0.188.0 (including) | 6.0.188.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0.196.0 (including) | 6.0.196.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0.199.0 (including) | 6.0.199.0 (including) |
| Wireless_lan_controller_software | Cisco | 6.0.199.4 (including) | 6.0.199.4 (including) |
| Wireless_lan_controller_software | Cisco | 7.0 (including) | 7.0 (including) |
| Wireless_lan_controller_software | Cisco | 7.0.98.0 (including) | 7.0.98.0 (including) |
| Wireless_lan_controller_software | Cisco | 7.1 (including) | 7.1 (including) |
| Wireless_lan_controller_software | Cisco | 7.2 (including) | 7.2 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
- http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc