CVE-2012-0371: cisco wireless_lan_controller_software
CVSS: 9.3v2.0HighModified
Published 01-03-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-0371 is a high (CVSS 9.3) vulnerability in cisco wireless_lan_controller_software. EPSS estimates a 1.62% chance of exploitation in the next 30 days, higher than 75.6% of scored vulnerabilities.
CVSS score
9.3/10
010
High · v2.0 (NVD)EPSS score
1.62%
0%100%
Low · -0.14 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 01-03-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709.
CVSS metrics
1 score · 1 source · 1 versionHigh 9.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
1.62%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
-0.14 pp
From 1.76% on 19-09-2026
19-09-202619-10-2026
EPSS score1.62%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- wireless_lan_controller_software4.0 | 4.0.108 | 4.0.155.0 | 4.0.155.5 | 4.0.179.8 | 4.0.179.11 | 4.0.196 | 4.0.206.0 | 4.0.217.0 | 4.0.219.0 | 4.1 | 4.1.171.0 | 4.1.181.0 | 4.1.185.0 | 4.1m | 4.2 | 4.2.61.0 | 4.2.99.0 | 4.2.112.0 | 4.2.117.0 | 4.2.130.0 | 4.2.173.0 | 4.2.174.0 | 4.2.176.0 | 4.2.182.0 | 4.2m | 5.0 | 5.0.148.0 | 5.0.148.2 | 5.1 | 5.1.151.0 | 5.1.152.0 | 5.1.160.0 | 5.2 | 5.2.157.0 | 5.2.169.0 | 6.0 | 6.0.182.0 | 6.0.188.0 | 6.0.196.0 | 6.0.199.0 | 6.0199.4 | 7.0 | 7.0.98.0
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120229-wlcVendor AdvisoryX Refsource CISCO