What’s Vulnerable › Vulnerabilities

CVE-2012-0368

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-03-01 · updated 2026-06-16
• Weakness: CWE-399

Description

The administrative management interface on Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allows remote attackers to cause a denial of service (device crash) via a malformed URL in an HTTP request, aka Bug ID CSCts81997.

Affected products

• Cisco 2000 Wireless Lan Controller: all versions
• Cisco 2100 Wireless Lan Controller: all versions
• Cisco 2106 Wireless Lan Controller: all versions
• Cisco 2112 Wireless Lan Controller: all versions
• Cisco 2125 Wireless Lan Controller: all versions
• Cisco 2500 Wireless Lan Controller: all versions
• Cisco 2504 Wireless Lan Controller: all versions
• Cisco 4100 Wireless Lan Controller: all versions
• Cisco 4400 Wireless Lan Controller: all versions
• Cisco 4402 Wireless Lan Controller: all versions
• Cisco 4404 Wireless Lan Controller: all versions
• Cisco 5508 Wireless Controller: all versions
• Cisco Wireless LAN Controller (WLC): 4.0, 4.0.108, 4.0.155.0, 4.0.155.5, 4.0.179.8, 4.0.179.11 (+40)

References

• http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc
• http://archives.neohapsis.com/archives/bugtraq/2012-02/0188.html
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlc

Get alerted when CVE-2012-0368 or the next vulnerability affects your stack