CVE-2018-0416CWE-20

Cisco Wireless LAN Controller Software Information Disclosure Vulnerability

Medium · published October 17, 2018

CVSS v3.0
5.3
EPSS
3%
Percentile
84.5
In the wild
Unconfirmed
What it is

A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sensitive system information.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02507 · 84.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-10-17T19:00Z
EPSS history
Timeline
  • 17 OCT 19:00Z
    Cisco Wireless LAN Controller Software Information Disclosure Vulnerability
    cvelistv5