CVEvulnerability

CVE-2013-1104

9.0 HIGH Published 2013-01-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

Affected configurations

• cisco 2000 wireless lan controller • cisco 2100 wireless lan controller • cisco 2500 wireless lan controller • cisco 4100 wireless lan controller • cisco 4400 wireless lan controller • cisco 5500 wireless lan controller • cisco 7500 wireless lan controller • cisco 8500 wireless lan controller • cisco wireless lan controller software 7.3.101.0

References