Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Cisco Wireless LAN Controllers let remote config change via ACLs

CVE-2012-0371 · published 14 years ago
Summary

Cisco Wireless LAN Controllers running software versions 4.x, 5.x, 6.0, and 7.0 prior to 7.0.220.4 can be accessed remotely to view or alter their settings when CPU‑based access lists are turned on. This could let an attacker modify network behavior or expose sensitive configuration data. Apply the latest software update or disable CPU‑based ACLs until the patch can be installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco wireless_lan_controller_software 4.0
4.0.108
4.0.155.0
4.0.155.5
4.0.179.8
4.0.179.11
4.0.196
4.0.206.0
4.0.217.0
4.0.219.0
4.1
4.1.171.0
32 more version ranges
cpe:2.3:o:cisco:wireless_lan_controller_software:4.0:*:*:*:*:*:*:*
cisco 2000_wireless_lan_controller All versions
cpe:2.3:h:cisco:2000_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2100_wireless_lan_controller All versions
cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2106_wireless_lan_controller All versions
cpe:2.3:h:cisco:2106_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2112_wireless_lan_controller All versions
cpe:2.3:h:cisco:2112_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2125_wireless_lan_controller All versions
cpe:2.3:h:cisco:2125_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2500_wireless_lan_controller All versions
cpe:2.3:h:cisco:2500_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 2504_wireless_lan_controller All versions
cpe:2.3:h:cisco:2504_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 4100_wireless_lan_controller All versions
cpe:2.3:h:cisco:4100_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 4400_wireless_lan_controller All versions
cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 4402_wireless_lan_controller All versions
cpe:2.3:h:cisco:4402_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 4404_wireless_lan_controller All versions
cpe:2.3:h:cisco:4404_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco 5508_wireless_controller All versions
cpe:2.3:h:cisco:5508_wireless_controller:*:*:*:*:*:*:*:*
Original advisory text
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via un...
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published1 Mar 2012
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-0371 · NVD
Track software like this
Free during beta