Cross-Site Request Forgery Vulnerabilities in Cisco Wireless LAN Controller

CVE-2012-5992

Summary

Cisco Wireless LAN Controller devices running software version 7.2.110.0 contain multiple vulnerabilities that allow attackers to perform unauthorized actions without the knowledge or consent of the administrator. These vulnerabilities enable adversaries to hijack administrator authentication, facilitating the addition of unauthorized management accounts and the insertion of cross-site scripting (XSS) payloads into web authentication screens. This poses significant risks of unauthorized access and data compromise, making it critical for organizations to thoroughly secure their devices against these threats.

References