CVE:CVE-2009-1167
CNNVD:CNNVD-200907-410
Cisco无线LAN控制器(WLC)负责系统范围内的无线LAN功能，如安全策略、入侵检测、RF管理、服务质量(QoS)和移动性 。
特制HTTP或HTTPS请求非授权修改配置漏洞 第一个修复版本之前的所有之前软件版本都存在非授权修改配置漏洞，直接向WLC提交HTTP或HTTPS请求的远程未经认证攻击者可以完全控制受影响的设备 。
solution:Upgrade cisco catalyst_3750g to a higher version than *; Upgrade cisco cisco_1500_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2; Upgrade cisco cisco_2000_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2; Upgrade cisco cisco_2100_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2; Upgrade cisco cisco_4100_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2; Upgrade cisco cisco_4200_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2; Upgrade cisco cisco_4400_wireless_lan_controller to a higher version than 4.1,4.1m,4.2,5.0,5.1,5.2,and avoid the version 4.1,4.1m,4.2,5.0,5.1,5.2