HIGH · 9.0

CVE-2013-1105

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management se...

Vulnerability Description

Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug ID CSCua60653.

CVSS Score

9.0

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
CiscoWireless Lan Controller Software7.0
Cisco2000 Wireless Lan ControllerAll versions
Cisco2100 Wireless Lan ControllerAll versions
Cisco2500 Wireless Lan Controller-
Cisco5500 Wireless Lan Controller-
Cisco7500 Wireless Lan Controller-
Cisco8500 Wireless Lan Controller-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-1105?

CVE-2013-1105 is a vulnerability with a CVSS score of 9.0 (HIGH). Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management se...

How severe is CVE-2013-1105?

CVE-2013-1105 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1105?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Wireless Lan Controller Software, Cisco 2000 Wireless Lan Controller, Cisco 2100 Wireless Lan Controller, Cisco 2500 Wireless Lan Controller, Cisco 5500 Wireless Lan Controller.