imPC@ndo IT

Tracker / CVE-2013-1104

CVE-2013-1104

High 9.0

The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

Affected products and versions

cisco 2000_wireless_lan_controller
cisco 2100_wireless_lan_controller
cisco 2500_wireless_lan_controller
cisco 4100_wireless_lan_controller
cisco 4400_wireless_lan_controller
cisco 5500_wireless_lan_controller
cisco 7500_wireless_lan_controller
cisco 8500_wireless_lan_controller
cisco wireless_lan_controller_software

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References