CVE-2015-0726
Last modified
CVE-2015-0726 is a vulnerability of currently unknown severity. The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka Bug IDs CSCum65159 and CSCum65252.. EPSS estimates a 2.77% chance of exploitation in the next 30 days.
Description
The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka Bug IDs CSCum65159 and CSCum65252.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Wireless Lan Controller Software | 7.0.98.0 |
| Cisco | Wireless Lan Controller Software | 7.0.98.218 |
| Cisco | Wireless Lan Controller Software | 7.0.116.0 |
| Cisco | Wireless Lan Controller Software | 7.0.220.0 |
| Cisco | Wireless Lan Controller Software | 7.0_base |
| Cisco | Wireless Lan Controller Software | 7.4.1.54 |
| Cisco | Wireless Lan Controller Software | 7.4.100 |
| Cisco | Wireless Lan Controller Software | 7.4.100.60 |
| Cisco | Wireless Lan Controller Software | 7.4.110.0 |
| Cisco | Wireless Lan Controller Software | 7.4.121.0 |
| Cisco | Wireless Lan Controller Software | 7.4_base |
| Cisco | Wireless Lan Controller Software | 7.6.100.0 |
References
- http://www.securityfocus.com/bid/74641Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032327Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/74641Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032327Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-0726?
How severe is CVE-2015-0726?
How do I fix CVE-2015-0726?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-0718Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000,…
- CVE-2015-0721Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus…
- CVE-2015-0722The network drivers in Cisco TelePresence T, Cisco TelePrese…
- CVE-2015-0723The wireless web-authentication subsystem on Cisco Wireless …
- CVE-2015-0724Multiple cross-site scripting (XSS) vulnerabilities in dncs …
- CVE-2015-0725Cisco Videoscape Distribution Suite Service Broker (aka VDS-…
- CVE-2015-0727Cross-site scripting (XSS) vulnerability in the HTTP module …
- CVE-2015-0728Cross-site scripting (XSS) vulnerability in Cisco Access Con…
- CVE-2015-0729Cross-site scripting (XSS) vulnerability in Cisco Secure Acc…
- CVE-2015-0730The SMB module in Cisco Wide Area Application Services (WAAS…
- CVE-2015-0731The ISDN implementation in Cisco IOS 15.3S allows remote att…
- CVE-2015-0732Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on…
Are you affected by CVE-2015-0726?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
