CVE-2017-3832

A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a missing internal handler for the specific request. An attacker could exploit this vulnerability by accessing a specific hidden URL on the GUI web management interface. A successful exploit could allow the attacker to cause a reload of the device, resulting in a DoS condition. This vulnerability affects only the Cisco Wireless LAN Controller 8.3.102.0 release. Cisco Bug IDs: CSCvb48198.

• CWE-264
• CWE-755

• http://www.securityfocus.com/bid/97421Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038184Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3Vendor Advisory
• http://www.securityfocus.com/bid/97421Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038184Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-wlc3Vendor Advisory

Published

Apr 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3826A vulnerability in the Stream Control Transmission Protocol …
• CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-3828A vulnerability in the web-based management interface of Cis…
• CVE-2017-3829A vulnerability in the web-based management interface of Cis…
• CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
• CVE-2017-3831A vulnerability in the web-based GUI of Cisco Mobility Expre…
• CVE-2017-3833A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-3834A vulnerability in Cisco Aironet 1830 Series and Cisco Airon…9.8
• CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Serv…
• CVE-2017-3836A vulnerability in the web framework Cisco Unified Communica…
• CVE-2017-3837An HTTP Packet Processing vulnerability in the Web Bridge in…
• CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) …