CVE-2013-1104

Published: Jan 24, 2013Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

Affected (9)

Products: Cisco: 2000 Wireless Lan Controller, 2100 Wireless Lan Controller, 2500 Wireless Lan Controller, 4100 Wireless Lan Controller, 4400 Wireless Lan Controller, 5500 Wireless Lan Controller, 7500 Wireless Lan Controller, 8500 Wireless Lan Controller, Wireless Lan Controller Software

Cisco

9 products

2000 Wireless Lan Controller

2100 Wireless Lan Controller

2500 Wireless Lan Controller

4100 Wireless Lan Controller

4400 Wireless Lan Controller

5500 Wireless Lan Controller

7500 Wireless Lan Controller

8500 Wireless Lan Controller

Wireless Lan Controller Software

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco 2000 Wireless Lan Controller	All versions
Cisco 2100 Wireless Lan Controller	All versions
Cisco 2500 Wireless Lan Controller	All versions
Cisco 4100 Wireless Lan Controller	All versions
Cisco 4400 Wireless Lan Controller	All versions
Cisco 5500 Wireless Lan Controller	All versions
Cisco 7500 Wireless Lan Controller	All versions
Cisco 8500 Wireless Lan Controller	All versions
Cisco Wireless Lan Controller Software	Version 7.3.101.0