CVE-2014-3291

Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321.

• CWE-20

• http://secunia.com/advisories/57895Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3291Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34558Vendor Advisory
• http://www.securityfocus.com/bid/67926Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030410Third Party Advisory, VDB Entry
• http://secunia.com/advisories/57895Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3291Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34558Vendor Advisory
• http://www.securityfocus.com/bid/67926Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030410Third Party Advisory, VDB Entry

Published

Jun 8, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3284Cisco IOS XE on ASR1000 devices, when PPPoE termination is e…
• CVE-2014-3285Cisco Wide Area Application Services (WAAS) 5.3(.5a) and ear…
• CVE-2014-3286The web framework in Cisco WebEx Meeting Server does not pro…
• CVE-2014-3287SQL injection vulnerability in BulkViewFileContentsAction.ja…
• CVE-2014-3289Cross-site scripting (XSS) vulnerability in the web manageme…
• CVE-2014-3290The mDNS implementation in Cisco IOS XE 3.12S does not prope…
• CVE-2014-3292The Real Time Monitoring Tool (RTMT) implementation in Cisco…
• CVE-2014-3293Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decis…
• CVE-2014-3294Cisco WebEx Meeting Server does not properly restrict the co…
• CVE-2014-3295The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier a…
• CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeti…
• CVE-2014-3297Cisco Intelligent Automation for Cloud in Cisco Cloud Portal…