VDB

CVE-2009-0059

CVE-2009-0059 PUBLISHED CVSS 7.800000190734863 HIGH

The Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0 allow remote attackers to cause a denial of service (device reload) via a web authentication (aka WebAuth) session that includes a malformed POST request to login.html.

EPSS 0.99% · 77.2th percentile

Risk Scores

CVSS 2.0
7.800000190734863
EPSS Score
0.99%
77.2th percentile

Affected Products

VendorProductVersions
ciscocatalyst_6500_series_integrated_wireless_lan_controller5.2, 4.1, 4.2
ciscowireless_lan_controller_software5.2, 4.2, 4.1
ciscocatalyst_3750_series_integrated_wireless_lan_controller4.1, 4.2, 5.2
n/an/a*
cisco4400_wireless_lan_controller4.2, 4.1, 5.2
ciscocatalyst_7600_series_wireless_lan_controller4.2, 4.1, 5.2

Timeline

  • Feb 4, 2009 CVE Published
  • Feb 4, 2009 PoC Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 25, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›