CVE-2012-6007 Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitra...
MediumCVSS 4.3
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a different vulnerability than CVE-2012-5992.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless lan controller software | = 7.2.110.0 | No fix listed |
| cisco 2000 wireless lan controller | All versions | No fix listed |
| cisco 2100 wireless lan controller | All versions | No fix listed |
| cisco 2500 wireless lan controller | All versions | No fix listed |
| cisco 4100 wireless lan controller | All versions | No fix listed |
| cisco 4400 wireless lan controller | All versions | No fix listed |
| cisco 5500 wireless lan controller | All versions | No fix listed |
| cisco 7500 wireless lan controller | All versions | No fix listed |
| cisco 8500 wireless lan controller | All versions | No fix listed |
References
- infosec42.blogspot.dk exploit