CVE-2013-1104 The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header...
HighCVSS 9.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco 2000 wireless lan controller | All versions | No fix listed |
| cisco 2100 wireless lan controller | All versions | No fix listed |
| cisco 2500 wireless lan controller | All versions | No fix listed |
| cisco 4100 wireless lan controller | All versions | No fix listed |
| cisco 4400 wireless lan controller | All versions | No fix listed |
| cisco 5500 wireless lan controller | All versions | No fix listed |
| cisco 7500 wireless lan controller | All versions | No fix listed |
| cisco 8500 wireless lan controller | All versions | No fix listed |
| cisco wireless lan controller software | = 7.3.101.0 | No fix listed |
References
- 89533 vdb-entry
- 51965 third-party-advisory
- 20130123 Multiple Vulnerabilities in Cisco Wireless LAN Controllers vendor-advisory
- 57524 vdb-entry
- 1028027 vdb-entry
- cisco-wlc-profiling-code-exec(81489) vdb-entry