CVE-2018-0442

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to retrieve memory contents, which could lead to the disclosure of confidential information. The vulnerability is due to insufficient condition checks in the part of the code that handles CAPWAP keepalive requests. An attacker could exploit this vulnerability by sending a crafted CAPWAP keepalive packet to a vulnerable Cisco WLC device. A successful exploit could allow the attacker to retrieve the contents of device memory, which could lead to the disclosure of confidential information.

• CWE-200

• http://www.securityfocus.com/bid/105664Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041923Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-memory-leakVendor Advisory
• http://www.securityfocus.com/bid/105664Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041923Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-memory-leakVendor Advisory

Published

Oct 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0436A vulnerability in Cisco Webex Teams, formerly Cisco Spark, …8.7
• CVE-2018-0437A vulnerability in the Cisco Umbrella Enterprise Roaming Cli…
• CVE-2018-0438A vulnerability in the Cisco Umbrella Enterprise Roaming Cli…
• CVE-2018-0439A vulnerability in the web-based management interface of Cis…
• CVE-2018-0440A vulnerability in the web interface of Cisco Data Center Ne…
• CVE-2018-0441A vulnerability in the 802.11r Fast Transition feature set o…7.4
• CVE-2018-0443A vulnerability in the Control and Provisioning of Wireless …7.5
• CVE-2018-0444A vulnerability in the web-based management interface of Cis…
• CVE-2018-0445A vulnerability in the web-based management interface of Cis…
• CVE-2018-0446A vulnerability in the web-based management interface of Cis…
• CVE-2018-0447A vulnerability in the anti-spam protection mechanisms of Ci…
• CVE-2018-0448A vulnerability in the identity management service of Cisco …9.8