CVE-2012-0368
First published: Thu Mar 01 2012(Updated: )
The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controllers | =4.0 | |
| Cisco Wireless LAN Controllers | =4.0.108 | |
| Cisco Wireless LAN Controllers | =4.0.155.0 | |
| Cisco Wireless LAN Controllers | =4.0.155.5 | |
| Cisco Wireless LAN Controllers | =4.0.179.8 | |
| Cisco Wireless LAN Controllers | =4.0.179.11 | |
| Cisco Wireless LAN Controllers | =4.0.196 | |
| Cisco Wireless LAN Controllers | =4.0.206.0 | |
| Cisco Wireless LAN Controllers | =4.0.217.0 | |
| Cisco Wireless LAN Controllers | =4.0.219.0 | |
| Cisco Wireless LAN Controllers | =4.1 | |
| Cisco Wireless LAN Controllers | =4.1.171.0 | |
| Cisco Wireless LAN Controllers | =4.1.181.0 | |
| Cisco Wireless LAN Controllers | =4.1.185.0 | |
| Cisco Wireless LAN Controllers | =4.1m | |
| Cisco Wireless LAN Controllers | =4.2 | |
| Cisco Wireless LAN Controllers | =4.2.61.0 | |
| Cisco Wireless LAN Controllers | =4.2.99.0 | |
| Cisco Wireless LAN Controllers | =4.2.112.0 | |
| Cisco Wireless LAN Controllers | =4.2.117.0 | |
| Cisco Wireless LAN Controllers | =4.2.130.0 | |
| Cisco Wireless LAN Controllers | =4.2.173.0 | |
| Cisco Wireless LAN Controllers | =4.2.174.0 | |
| Cisco Wireless LAN Controllers | =4.2.176.0 | |
| Cisco Wireless LAN Controllers | =4.2.182.0 | |
| Cisco Wireless LAN Controllers | =4.2m | |
| Cisco Wireless LAN Controllers | =5.0 | |
| Cisco Wireless LAN Controllers | =5.0.148.0 | |
| Cisco Wireless LAN Controllers | =5.0.148.2 | |
| Cisco Wireless LAN Controllers | =5.1 | |
| Cisco Wireless LAN Controllers | =5.1.151.0 | |
| Cisco Wireless LAN Controllers | =5.1.152.0 | |
| Cisco Wireless LAN Controllers | =5.1.160.0 | |
| Cisco Wireless LAN Controllers | =5.2 | |
| Cisco Wireless LAN Controllers | =5.2.157.0 | |
| Cisco Wireless LAN Controllers | =5.2.169.0 | |
| Cisco Wireless LAN Controllers | =6.0 | |
| Cisco Wireless LAN Controllers | =6.0.182.0 | |
| Cisco Wireless LAN Controllers | =6.0.188.0 | |
| Cisco Wireless LAN Controllers | =6.0.196.0 | |
| Cisco Wireless LAN Controllers | =6.0.199.0 | |
| Cisco Wireless LAN Controllers | =6.0.199.4 | |
| Cisco Wireless LAN Controllers | =7.0 | |
| Cisco Wireless LAN Controllers | =7.0.98.0 | |
| Cisco Wireless LAN Controllers | =7.1 | |
| Cisco Wireless LAN Controllers | =7.2 | |
| Cisco 2500 Wireless LAN Controller | ||
| Cisco 2100 Wireless LAN Controller | ||
| Cisco 2106 Wireless LAN Controller | ||
| Cisco 2112 Wireless LAN Controller | ||
| Cisco 2125 Wireless LAN Controller | ||
| Cisco 2500 Wireless LAN Controller | ||
| Cisco 2500 Wireless LAN Controller | ||
| Cisco 4100 Wireless LAN Controller | ||
| Cisco 4400 Wireless LAN Controller | ||
| Cisco 4402 Wireless LAN Controller | ||
| Cisco 4404 Wireless LAN Controller | ||
| Cisco 5508 Wireless Controller firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-0368?
CVE-2012-0368 has a medium severity rating as it allows remote attackers to cause a denial of service by crashing Cisco Wireless LAN Controller devices.
How do I fix CVE-2012-0368?
To fix CVE-2012-0368, update your Cisco Wireless LAN Controller software to versions 7.0.220.0 or later, 7.1.91.0 or later, or 7.2.103.0 or later.
Which Cisco Wireless LAN Controller versions are affected by CVE-2012-0368?
CVE-2012-0368 affects Cisco Wireless LAN Controller software versions 4.x, 5.x, 6.0, and 7.0 prior to 7.0.220.0.
Can a malformed URL in an HTTP request trigger CVE-2012-0368?
Yes, CVE-2012-0368 can be triggered by sending a malformed URL in an HTTP request to the vulnerable Cisco Wireless LAN Controller.
What impact does CVE-2012-0368 have on Cisco Wireless LAN Controllers?
The impact of CVE-2012-0368 is a denial of service, resulting in a device crash of affected Cisco Wireless LAN Controller devices.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco wireless lan controllers
- version/cisco wireless lan controllers/4.0
- version/cisco wireless lan controllers/4.0.108
- version/cisco wireless lan controllers/4.0.155.0
- version/cisco wireless lan controllers/4.0.155.5
- version/cisco wireless lan controllers/4.0.179.8
- version/cisco wireless lan controllers/4.0.179.11
- version/cisco wireless lan controllers/4.0.196
- version/cisco wireless lan controllers/4.0.206.0
- version/cisco wireless lan controllers/4.0.217.0
- version/cisco wireless lan controllers/4.0.219.0
- version/cisco wireless lan controllers/4.1
- version/cisco wireless lan controllers/4.1.171.0
- version/cisco wireless lan controllers/4.1.181.0
- version/cisco wireless lan controllers/4.1.185.0
- version/cisco wireless lan controllers/4.1m
- version/cisco wireless lan controllers/4.2
- version/cisco wireless lan controllers/4.2.61.0
- version/cisco wireless lan controllers/4.2.99.0
- version/cisco wireless lan controllers/4.2.112.0
- version/cisco wireless lan controllers/4.2.117.0
- version/cisco wireless lan controllers/4.2.130.0
- version/cisco wireless lan controllers/4.2.173.0
- version/cisco wireless lan controllers/4.2.174.0
- version/cisco wireless lan controllers/4.2.176.0
- version/cisco wireless lan controllers/4.2.182.0
- version/cisco wireless lan controllers/4.2m
- version/cisco wireless lan controllers/5.0
- version/cisco wireless lan controllers/5.0.148.0
- version/cisco wireless lan controllers/5.0.148.2
- version/cisco wireless lan controllers/5.1
- version/cisco wireless lan controllers/5.1.151.0
- version/cisco wireless lan controllers/5.1.152.0
- version/cisco wireless lan controllers/5.1.160.0
- version/cisco wireless lan controllers/5.2
- version/cisco wireless lan controllers/5.2.157.0
- version/cisco wireless lan controllers/5.2.169.0
- version/cisco wireless lan controllers/6.0
- version/cisco wireless lan controllers/6.0.182.0
- version/cisco wireless lan controllers/6.0.188.0
- version/cisco wireless lan controllers/6.0.196.0
- version/cisco wireless lan controllers/6.0.199.0
- version/cisco wireless lan controllers/6.0.199.4
- version/cisco wireless lan controllers/7.0
- version/cisco wireless lan controllers/7.0.98.0
- version/cisco wireless lan controllers/7.1
- version/cisco wireless lan controllers/7.2
- canonical/cisco 2500 wireless lan controller
- canonical/cisco 2100 wireless lan controller
- canonical/cisco 2106 wireless lan controller
- canonical/cisco 2112 wireless lan controller
- canonical/cisco 2125 wireless lan controller
- canonical/cisco 4100 wireless lan controller
- canonical/cisco 4400 wireless lan controller
- canonical/cisco 4402 wireless lan controller
- canonical/cisco 4404 wireless lan controller
- canonical/cisco 5508 wireless controller firmware