HIGH · 10.0

CVE-2009-1167

Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 S...

Vulnerability Description

Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoCatalyst 3750GAll versions
CiscoCisco 1500 Wireless Lan Controller4.1
CiscoCisco 2000 Wireless Lan Controller4.1
CiscoCisco 2100 Wireless Lan Controller4.1
CiscoCisco 4100 Wireless Lan Controller4.1
CiscoCisco 4200 Wireless Lan Controller4.1
CiscoCisco 4400 Wireless Lan Controller4.1

References

FAQ

What is CVE-2009-1167?

CVE-2009-1167 is a vulnerability with a CVSS score of 10.0 (HIGH). Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 S...

How severe is CVE-2009-1167?

CVE-2009-1167 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-1167?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Catalyst 3750G, Cisco Cisco 1500 Wireless Lan Controller, Cisco Cisco 2000 Wireless Lan Controller, Cisco Cisco 2100 Wireless Lan Controller, Cisco Cisco 4100 Wireless Lan Controller.