CVE Feed

    Dashboard / CVE / CVE-2012-0368

    CVE-2012-0368

    The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.

    Published:Mar 1, 2012
    Last Modified:Apr 11, 2025
    EPS:Mar 1, 2012
    EPSS Score:0.00427
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    2000 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2100 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2106 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2112 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2125 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2500 Wireless Lan Controller
    Vendor
    Cisco
    Product
    2504 Wireless Lan Controller
    Vendor
    Cisco
    Product
    4100 Wireless Lan Controller
    Vendor
    Cisco
    Product
    4400 Wireless Lan Controller
    Vendor
    Cisco
    Product
    4402 Wireless Lan Controller
    Vendor
    Cisco
    Product
    4404 Wireless Lan Controller
    Vendor
    Cisco
    Product
    5508 Wireless Controller
    Vendor
    Cisco
    Product
    Wireless Lan Controller Software

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2013-1235 (CVSS 5) — Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TEL…
    CVE-2013-1104 (CVSS 9) — The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows…
    CVE-2013-1105 (CVSS 9) — Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, …
    CVE-2013-1102 (CVSS 7.8) — The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with …
    CVE-2013-1103 (CVSS 7.8) — Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 b…
    CVE-2012-6007 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller…
    CVE-2012-5992 (CVSS 6.8) — Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with…
    CVE-2012-5991 (CVSS 6.3) — screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow…
    CVE-2012-0369 (CVSS 7.8) — Cisco Wireless LAN Controller (WLC) devices with software 6.0 and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, a…
    CVE-2012-0370 (CVSS 7.8) — Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 befo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High