CVE-2012-5991
mediumpriority · track · 37EPSS 0.055 · 93 %ileexploit · PoCEUUSEPSS · scored 2026-10-28
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
affected products (10)
Products and version ranges known to be affected.
- cisco 2000 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:2000_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 2100 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 2500 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:2500_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 4100 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:4100_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 4400 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 5500 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:5500_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 7500 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:7500_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco 8500 wireless lan controllerall versionsnvdUScpe:2.3:h:cisco:8500_wireless_lan_controller:*:*:*:*:*:*:*:*
- cisco wireless lan controller software= 7.2.110.0nvdUScpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (5)
External citations — patches, advisories, analysis.
- http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.htmlcnnvd
- http://secunia.com/advisories/51546cnnvd
- http://www.securityfocus.com/bid/56929cnnvd
- http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.htmlenisa_euvd
- http://infosec42.blogspot.dk/2012/12/cisco-wlc-csrf-dos-and-persistent-xss.htmlExploitnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan