CVE-2018-0235

A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of certain 802.11 management information element frames that an affected device receives from wireless clients. An attacker could exploit this vulnerability by sending a malformed 802.11 management frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects only Cisco Wireless LAN Controllers that are running Cisco Mobility Express Release 8.5.103.0. Cisco Bug IDs: CSCvg07024.

• CWE-20

• http://www.securityfocus.com/bid/104080Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdosVendor Advisory
• http://www.securityfocus.com/bid/104080Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdosVendor Advisory

Published

May 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0228A vulnerability in the ingress flow creation functionality o…8.6
• CVE-2018-0229A vulnerability in the implementation of Security Assertion …
• CVE-2018-0230A vulnerability in the internal packet-processing functional…8.6
• CVE-2018-0231A vulnerability in the Transport Layer Security (TLS) librar…8.6
• CVE-2018-0233A vulnerability in the Secure Sockets Layer (SSL) packet rea…
• CVE-2018-0234A vulnerability in the implementation of Point-to-Point Tunn…
• CVE-2018-0236Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0237A vulnerability in the file type detection mechanism of the …5.8
• CVE-2018-0238A vulnerability in the role-based resource checking function…
• CVE-2018-0239A vulnerability in the egress packet processing functionalit…7.5
• CVE-2018-0240Multiple vulnerabilities in the Application Layer Protocol I…8.6
• CVE-2018-0241A vulnerability in the UDP broadcast forwarding function of …