Vulnerability Description
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | 2000 Wireless Lan Controller | All versions |
| Cisco | 2100 Wireless Lan Controller | All versions |
| Cisco | 2500 Wireless Lan Controller | - |
| Cisco | 4100 Wireless Lan Controller | All versions |
| Cisco | 4400 Wireless Lan Controller | All versions |
| Cisco | 5500 Wireless Lan Controller | - |
| Cisco | 7500 Wireless Lan Controller | - |
| Cisco | 8500 Wireless Lan Controller | - |
| Cisco | Wireless Lan Controller Software | 7.3.101.0 |
References
- http://osvdb.org/89533
- http://secunia.com/advisories/51965
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
- http://www.securityfocus.com/bid/57524
- http://www.securitytracker.com/id/1028027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81489
- http://osvdb.org/89533
- http://secunia.com/advisories/51965
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
- http://www.securityfocus.com/bid/57524
- http://www.securitytracker.com/id/1028027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81489
FAQ
What is CVE-2013-1104?
CVE-2013-1104 is a vulnerability with a CVSS score of 9.0 (HIGH). The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header...
How severe is CVE-2013-1104?
CVE-2013-1104 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1104?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco 2000 Wireless Lan Controller, Cisco 2100 Wireless Lan Controller, Cisco 2500 Wireless Lan Controller, Cisco 4100 Wireless Lan Controller, Cisco 4400 Wireless Lan Controller.