CyberSec.Space Logo
Back to CVE Browser

CVE-2014-0703

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0130%
EPSS Percentile13.97th
PublishedMar 6, 2014
Last ModifiedMay 6, 2026

Vulnerability Description

Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting to an Aironet access point on which this server had been disabled ineffectively, aka Bug ID CSCuf66202.

Affected Platforms (CPE)

💻
Cisco

Wireless Lan Controller Software

= 7.4.100.0
💻
Cisco

Wireless Lan Controller Software

= 7.4.100.60
🔌
Cisco

Wireless Lan Controller

All versions

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc

Related Vulnerabilities

CVE-2016-13639.8

Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(...

CVE-2015-63149.8

Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attac...

CVE-2012-03719.3

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled...

CVE-2012-09859.3

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; ...