CVE-2012-0371

Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to…

published March 1, 2012

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

⚠️ A remote attacker can read or even change configurations on Cisco Wireless LAN Controller devices due to a sneaky vulnerability in specific software versions! Think of it like a restaurant where someone on the outside can sneak into the kitchen and change the menu — you just don’t want that happening! 🍽️ This vulnerability allows attackers to tamper with your configurations, which could lead to network instability or unauthorized access. Imagine the chaos of having the wrong settings, potentially disrupting your entire wireless network!

Put simply

Think of it like a restaurant where someone on the outside can sneak into the kitchen and change the menu — you just don’t want that happening! 🍽️ The flaw resides in Cisco Wireless LAN Controllers running software versions 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, enabling attackers to manipulate configurations when CPU-based ACLs are enabled, through unspecified vectors.

What to do

This vulnerability allows attackers to tamper with your configurations, which could lead to network instability or unauthorized access. Imagine the chaos of having the wrong settings, potentially disrupting your entire wireless network! Immediate action is needed! Upgrade your Cisco Wireless LAN Controllers to version 7.0.220.4 or later. Ensure you regularly monitor your devices and consider implementing additional access controls to mitigate risks. You've got this! Implement these steps and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01618 · 75.7th percentile
Published
2012-03-01T01:00Z
EPSS history
Timeline
  • 01 MAR 01:00Z
    Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to…
    cvelistv5