CVE-2013-1141

Severity: medium (CVSS 6.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-28 · updated 2026-06-16
Weakness: CWE-119

Description

The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID CSCue04153.

Affected products

Cisco Wireless Lan Controller: all versions
Cisco Wireless LAN Controller (WLC): through 7.4.1.54; 3.0, 3.2, 3.2.116.21, 4.0, 4.0.108, 4.0.155.0 (+50)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1141
http://tools.cisco.com/security/center/viewAlert.x?alertId=28417
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1141
http://tools.cisco.com/security/center/viewAlert.x?alertId=28417

Get alerted when CVE-2013-1141 or the next vulnerability affects your stack