CVE-2013-1104

CVE Database · CVE-2013-1104

CVE-2013-1104

· N/AModified

CVSS v3.1

N/A

EPSS

3.73%

Published

Jan 24, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

Affected Products (9)

cisco · 2000_wireless_lan_controllervulnerable

cisco · 2100_wireless_lan_controllervulnerable

cisco · 2500_wireless_lan_controllervulnerable

cisco · 4100_wireless_lan_controllervulnerable

cisco · 4400_wireless_lan_controllervulnerable

cisco · 5500_wireless_lan_controllervulnerable

cisco · 7500_wireless_lan_controllervulnerable

cisco · 8500_wireless_lan_controllervulnerable

cisco · wireless_lan_controller_softwarevulnerable

References (12)

http://osvdb.org/89533

http://secunia.com/advisories/51965

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc

Vendor Advisory

http://www.securityfocus.com/bid/57524

http://www.securitytracker.com/id/1028027

https://exchange.xforce.ibmcloud.com/vulnerabilities/81489