CVE:CVE-2012-5991
CNNVD:CNNVD-201212-211
Cisco Wireless LAN Controller（WLC）是美国思科（Cisco）公司的一款无线局域网控制器产品。该产品在无线局域网中提供安全策略、入侵检测等功能。
Cisco Wireless LAN Controller中存在拒绝服务漏洞，该漏洞源于Web管理界面没有正确验证web_auth_custom.html脚本的用户输入。通过发送特制的HTTP GET请求到受影响目标系统，经过身份验证的远程攻击者可利用该漏洞意外中断受影响软件，造成拒绝服务。Cisco Wireless LAN Controller 7.2.110.0版本中存在漏洞，其他版本也可能受到影响。
solution:Upgrade cisco wireless_lan_controller_software to a higher version than 7.2.110.0,and avoid the version 7.2.110.0; Upgrade cisco 2000_wireless_lan_controller to a higher version than *; Upgrade cisco 2100_wireless_lan_controller to a higher version than *; Upgrade cisco 2500_wireless_lan_controller to a higher version than -; Upgrade cisco 4100_wireless_lan_controller to a higher version than *; Upgrade cisco 4400_wireless_lan_controller to a higher version than *; Upgrade cisco 5500_wireless_lan_controller to a higher version than -; Upgrade cisco 7500_wireless_lan_controller to a higher version than -; Upgrade cisco 8500_wireless_lan_controller to a higher version than -