Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Cisco Wireless LAN Controller may leak system information

CVE-2018-0416 · published 8 years ago
Summary

The web interface of Cisco Wireless LAN Controller software can be tricked into revealing internal system details without any login. An attacker can do this by sending specially crafted web requests, exposing information that should remain private. Review the controller's settings and apply any available updates or patches to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco wireless_lan_controller_software 8.5\(130.0\)
8.9\(1.52\)
cpe:2.3:o:cisco:wireless_lan_controller_software:8.5\(130.0\):*:*:*:*:*:*:*
Original advisory text
A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances...
A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sensitive system information.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
3% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published17 Oct 2018
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-0416 · NVD
Track software like this
Free during beta