SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-1235

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly…

MEDIUM 5.0EPSS 1.23%

Does this matter?

Lower severity and a low EPSS score (1.23%). Track it; it rarely justifies an emergency change on its own.

Description

Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
1.23% probability · 67th percentile
CISA KEV
Not listed
Affected
cisco/2000 wireless lan controller · cisco/2100 wireless lan controller · cisco/2106 wireless lan controller · cisco/2112 wireless lan controller · cisco/2125 wireless lan controller · cisco/2500 wireless lan controller · cisco/2504 wireless lan controller · cisco/4100 wireless lan controller · cisco/4400 wireless lan controller · cisco/4402 wireless lan controller · cisco/4404 wireless lan controller · cisco/5500 wireless lan controller · cisco/7500 wireless lan controller · cisco/8500 wireless lan controller · cisco/airespace 4000 wireless lan controller · cisco/wireless lan controller
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.