CVE-2014-0701

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-06 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0 do not properly deallocate memory, which allows remote attackers to cause a denial of service (reboot) by sending WebAuth login requests at a high rate, aka Bug ID CSCuf52361.

Affected products

Cisco Wireless LAN Controller (WLC): 7.0, 7.0.220.0, 7.0.235.0, 7.2, 7.2.103.0, 7.2.110.0 (+4)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-wlc

Get alerted when CVE-2014-0701 or the next vulnerability affects your stack