4.9
Medium
CVE-2019-1830 A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could…
Description
A vulnerability in Locally Significant Certificate (LSC) management for the Cisco Wireless LAN Controller (WLC) could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service (DoS) condition. The attacker would need to have valid administrator credentials. The vulnerability is due to incorrect input validation of the HTTP URL used to establish a connection to the LSC Certificate Authority (CA). An attacker could exploit this vulnerability by authenticating to the targeted device and configuring a LSC certificate. An exploit could allow the attacker to cause a DoS condition due to an unexpected restart of the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Wireless LAN Controller (WLC) | 8.3 | No fix stated |
References
- 20190417 Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability tools.cisco.com
- 108028 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Wireless LAN Controller (WLC)
The 25 CVEs of Cisco Wireless LAN Controller (WLC) →
CVE-2025-20191
A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco…
7.4
High
CVE-2023-20251
A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an…
6.1
Medium
CVE-2022-20769
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow…
7.4
High
CVE-2022-20695
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an…
10.0
Critical