Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2018-0416— Cisco Wireless LAN Controller Software Information Disclosure Vulnerability

Quick assessment

Affected
Cisco Cisco Wireless LAN Controller (WLC)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Wireless LAN Controller（WLC）Software是美国思科（Cisco）公司的一套用于配置和管理WLC（无线局域网控制器）的软件。 Cisco WLC Software中基于Web的界面存在输入验证漏洞，该漏洞源于不完整的输入验证检测机制。远程攻击者可通过该界面请求URLs利用该漏洞查看敏感的系统信息。以下产品受到影响：Cisco Physical wireless LAN controllers；Virtual wireless LAN controllers；802

AI Predicted 7.5 Difficulty: Easy EPSS 2.51% · P84
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-0416

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Wireless LAN Controller Software Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sensitive system information.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Wireless LAN Controller Software 输入验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Wireless LAN Controller（WLC）Software是美国思科（Cisco）公司的一套用于配置和管理WLC（无线局域网控制器）的软件。 Cisco WLC Software中基于Web的界面存在输入验证漏洞，该漏洞源于不完整的输入验证检测机制。远程攻击者可通过该界面请求URLs利用该漏洞查看敏感的系统信息。以下产品受到影响：Cisco Physical wireless LAN controllers；Virtual wireless LAN controllers；802
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco Wireless LAN Controller (WLC) n/a -

II. Public POCs for CVE-2018-0416

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-0416

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-0416 (3)

Same Patch Batch · Cisco · 2018-10-17 · 15 CVEs total

CVE-2018-0388 Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability
CVE-2018-0395 Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerabilit
CVE-2018-0456 Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vu
CVE-2018-15395 Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability
CVE-2018-15402 Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability
CVE-2018-0378 Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protoco
CVE-2018-0417 Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability
CVE-2018-0381 Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerabil
CVE-2018-0420 Cisco Wireless LAN Controller Software Directory Traversal Vulnerability
CVE-2018-0441 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability
CVE-2018-0442 Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points
CVE-2018-0443 Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points
CVE-2018-15435 Cisco SocialMiner Cross-Site Scripting Vulnerability
CVE-2018-15438 Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

IV. Related Vulnerabilities

Same product: Cisco Wireless LAN Controller (WLC)
Same vendor: Cisco
Same weakness: CWE-20

V. Comments for CVE-2018-0416

No comments yet

Leave a comment