CVE-2018-0443

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol component of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper input validation on fields within CAPWAP Discovery Request packets by the affected device. An attacker could exploit this vulnerability by sending malicious CAPWAP Discovery Request packets to the Cisco WLC Software. A successful exploit could allow the attacker to cause the Cisco WLC Software to disconnect associated access points (APs). While the APs disconnect and reconnect, service will be unavailable for a brief period of time, resulting in a DoS condition.

• CWE-399
• CWE-20

• http://www.securityfocus.com/bid/105686Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041922Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-dosVendor Advisory
• http://www.securityfocus.com/bid/105686Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041922Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-capwap-dosVendor Advisory

Published

Oct 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0437A vulnerability in the Cisco Umbrella Enterprise Roaming Cli…
• CVE-2018-0438A vulnerability in the Cisco Umbrella Enterprise Roaming Cli…
• CVE-2018-0439A vulnerability in the web-based management interface of Cis…
• CVE-2018-0440A vulnerability in the web interface of Cisco Data Center Ne…
• CVE-2018-0441A vulnerability in the 802.11r Fast Transition feature set o…7.4
• CVE-2018-0442A vulnerability in the Control and Provisioning of Wireless …7.5
• CVE-2018-0444A vulnerability in the web-based management interface of Cis…
• CVE-2018-0445A vulnerability in the web-based management interface of Cis…
• CVE-2018-0446A vulnerability in the web-based management interface of Cis…
• CVE-2018-0447A vulnerability in the anti-spam protection mechanisms of Ci…
• CVE-2018-0448A vulnerability in the identity management service of Cisco …9.8
• CVE-2018-0449A vulnerability in the Cisco Jabber Client Framework (JCF) s…4.2