7.5
Élevée
CVE-2018-0442 A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco…
Description
A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks in the part of the code that handles CAPWAP keepalive requests. An attacker could exploit this vulnerability by sending a crafted CAPWAP keepalive packet to a vulnerable Cisco WLC device. A successful exploit could allow the attacker to retrieve the contents of device memory, which could lead to the disclosure of confidential information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Wireless LAN Controller (WLC) | Versions non publiées |
Références
- 1041923 www.securitytracker.com
- 105664 www.securityfocus.com
- 20181017 Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Information Disclosure Vulnerability tools.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Wireless LAN Controller (WLC)
Les 25 CVE de Cisco Wireless LAN Controller (WLC) →
CVE-2025-20191
A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco…
7.4
Élevée
CVE-2023-20251
A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an…
6.1
Moyenne
CVE-2022-20769
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow…
7.4
Élevée
CVE-2022-20695
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) Software could allow an…
10.0
Critique