Marcin Kopec

**Name of the Vulnerable Software and Affected Versions** Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers (affected versions not specified) **Description** The issue is related to insufficient validation of CAPWAP packets in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing. This could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device by sending a malformed CAPWAP packet. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: The issue is due to insufficient error handling in the web UI of Cisco IOS XE Software, allowing an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. An attacker could exploit this by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note that these vulnerabilities do not affect the console connection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient HTTP protections in the web UI on an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the web UI to follow a crafted link. A successful exploit could allow the attacker to corrupt memory on the affected device, forcing it to reload and causing a DoS condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified) Description: The issue is due to insufficient error handling in the web UI of Cisco IOS XE Software, allowing an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. An attacker could exploit this by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. These vulnerabilities do not affect the console connection. Recommendations: As a temporary workaround, consider disabling the web UI until a patch is available. Restrict access to the web UI to minimize the risk of exploitation. Cisco has released software updates that address these vulnerabilities, it is recommended to apply these updates to resolve the issue. There are no workarounds that address these vulnerabilities.

**Name of the Vulnerable Software and Affected Versions** Cisco Wireless LAN Controller (WLC) Software (affected versions not specified) **Description** The issue is related to insufficient validation of input data in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler. This could allow a remote attacker to cause a denial of service (DoS) condition by sending a specially crafted CAPWAP packet. A successful exploit could result in the affected device restarting, leading to a DoS condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Wireless LAN Controller (WLC) Software (affected versions not specified) **Description** A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be restricted. This issue is due to improper sanitization of user-supplied input in command-line parameters that describe filenames. An attacker could exploit this by using directory traversal techniques to submit a path to a desired file location, potentially allowing them to view system files containing sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Aironet Access Points (AP) versions 1540, 1560, 1800, 2800, 3800 **Description** The issue is related to errors in configuration and improper validation of user-supplied input for certain CLI commands. This could allow an authenticated, local attacker to gain access to the underlying Linux operating system without proper authentication. The attacker would need valid administrator device credentials to exploit this issue. **Recommendations** For versions 1540, 1560, 1800, 2800, 3800, consider restricting access to the CLI to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open Source Security Information Management (OSSIM) versions 0.9.9 rc5 and earlier **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `dest` parameter in the session/login.php file. **Recommendations** For Open Source Security Information Management (OSSIM) versions 0.9.9 rc5 and earlier, avoid using the `dest` parameter in the session/login.php file until a fix is available. As a temporary workaround, consider restricting access to the session/login.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open Source Security Information Management (OSSIM) version 0.9.9 rc5 **Description** The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `portname` parameter in the `/port/modifyportform.php` endpoint, which is not properly handled by a validation regular expression. **Recommendations** For Open Source Security Information Management (OSSIM) version 0.9.9 rc5, consider restricting access to the `/port/modifyportform.php` endpoint until a patch is available. As a temporary workaround, avoid using the `portname` parameter in this endpoint to minimize the risk of exploitation.