Lucene search

[email protected]CVE-2013-1105

HistoryJan 24, 2013 - 9:55 p.m.

CVE-2013-1105

2013-01-2421:55:06

CWE-264

[email protected]

web.nvd.nist.gov

cisco

wlc

wireless lan controller

snmp

authentication bypass

cve-2013-1105

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.2%

JSON

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.

Affected configurations

NVD

Node

ciscowireless_lan_controller_softwareMatch7.0

ciscowireless_lan_controller_softwareMatch7.0.98.0

ciscowireless_lan_controller_softwareMatch7.0.220.0

ciscowireless_lan_controller_softwareMatch7.1

ciscowireless_lan_controller_softwareMatch7.2

ciscowireless_lan_controller_softwareMatch7.2.103.0

ciscowireless_lan_controller_softwareMatch7.2.110.0

ciscowireless_lan_controller_softwareMatch7.3

AND

cisco2000_wireless_lan_controller

cisco2100_wireless_lan_controller

cisco2500_wireless_lan_controllerMatch-

cisco5500_wireless_lan_controllerMatch-

cisco7500_wireless_lan_controllerMatch-

cisco8500_wireless_lan_controllerMatch-

CPENameOperatorVersion
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.0.98.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.0.220.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.1
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.2
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.2.103.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.2.110.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq7.3
cisco:2000_wireless_lan_controllercisco 2000 wireless lan controllereq*
cisco:2100_wireless_lan_controllercisco 2100 wireless lan controllereq*

CPE	Name	Operator	Version
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.0.98.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.0.220.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.1
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.2
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.2.103.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.2.110.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	7.3
cisco:2000_wireless_lan_controller	cisco 2000 wireless lan controller	eq	*
cisco:2100_wireless_lan_controller	cisco 2100 wireless lan controller	eq	*