MEDIUM · 6.3

CVE-2012-5991

screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain bu...

Vulnerability Description

screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209.

CVSS Score

6.3

MEDIUM

AV:N/AC:M/Au:S/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoWireless Lan Controller Software7.2.110.0
Cisco2000 Wireless Lan ControllerAll versions
Cisco2100 Wireless Lan ControllerAll versions
Cisco2500 Wireless Lan Controller-
Cisco4100 Wireless Lan ControllerAll versions
Cisco4400 Wireless Lan ControllerAll versions
Cisco5500 Wireless Lan Controller-
Cisco7500 Wireless Lan Controller-
Cisco8500 Wireless Lan Controller-

References

FAQ

What is CVE-2012-5991?

CVE-2012-5991 is a vulnerability with a CVSS score of 6.3 (MEDIUM). screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain bu...

How severe is CVE-2012-5991?

CVE-2012-5991 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-5991?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Wireless Lan Controller Software, Cisco 2000 Wireless Lan Controller, Cisco 2100 Wireless Lan Controller, Cisco 2500 Wireless Lan Controller, Cisco 4100 Wireless Lan Controller.