CVE:CVE-2012-5992
CNNVD:CNNVD-201212-212
Cisco Wireless LAN Controller（WLC）是美国思科（Cisco）公司的一款无线局域网控制器产品。该产品在无线局域网中提供安全策略、入侵检测等功能。
Cisco Wireless LAN Controller (WLC)设备软件7.2.110.0版本中存在多个跨站请求伪造漏洞。通过诱使管理员(1)由screens/aaa/mgmtuser_create.html页面添加管理员账户或(2)通过headline参数传送到screens/base/web_auth_custom.html从而插入XSS序列，远程攻击者可利用这些漏洞劫持管理员的身份验证信息。
solution:Upgrade cisco wireless_lan_controller_software to a higher version than 7.2.110.0,and avoid the version 7.2.110.0; Upgrade cisco 2000_wireless_lan_controller to a higher version than *; Upgrade cisco 2100_wireless_lan_controller to a higher version than *; Upgrade cisco 2500_wireless_lan_controller to a higher version than -; Upgrade cisco 4100_wireless_lan_controller to a higher version than *; Upgrade cisco 4400_wireless_lan_controller to a higher version than *; Upgrade cisco 5500_wireless_lan_controller to a higher version than -; Upgrade cisco 7500_wireless_lan_controller to a higher version than -; Upgrade cisco 8500_wireless_lan_controller to a higher version than -