CVE-2013-1235: Medium severity cisco 2000 wireless lan controller vulnerability

Published May 4, 2013
·
Updated

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507.

Affected Software

16 affected components
Cisco 2000 Wireless Lan Controller
Cisco 2100 Wireless Lan Controller
Cisco 2106 Wireless Lan Controller
Cisco 2112 Wireless Lan Controller
Cisco 2125 Wireless Lan Controller
Cisco 2500 Wireless Lan Controller
Cisco 2504 Wireless Lan Controller
Cisco 4100 Wireless Lan Controller
Cisco 4400 Wireless Lan Controller
Cisco 4402 Wireless Lan Controller
Cisco 4404 Wireless Lan Controller
Cisco 5500 Wireless Lan Controller
Cisco 7500 Wireless Lan Controller
Cisco 8500 Wireless Lan Controller
Cisco Airespace 4000 Wireless Lan Controller
Cisco wireless LAN controller

Event History

May 4, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-1235?

CVE-2013-1235 is classified as a denial of service vulnerability affecting Cisco Wireless LAN Controllers.

2

How do I fix CVE-2013-1235?

To mitigate CVE-2013-1235, apply the recommended patches provided by Cisco for the affected Wireless LAN Controller models.

3

What devices are affected by CVE-2013-1235?

CVE-2013-1235 affects several models of Cisco Wireless LAN Controllers including 2100, 2500, 4400, and 8500 series.

4

What type of attack does CVE-2013-1235 enable?

CVE-2013-1235 enables remote attackers to create a denial of service condition by exhausting resources through multiple TELNET connections.

5

Is CVE-2013-1235 a local or remote vulnerability?

CVE-2013-1235 is a remote vulnerability that allows attackers to exploit the flaw without local access.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203