Medium severity5.3NVD Advisory· Published Oct 17, 2018· Updated Jun 17, 2026

CVE-2018-0416

Description

A vulnerability in the web-based interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the web-based interface URL request. An attacker could exploit this vulnerability by requesting specific URLs via the web-based interface. A successful exploit could allow the attacker to view sensitive system information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Wireless Lan Controller Software3 versions
cpe:2.3:o:cisco:wireless_lan_controller_software:8.5\(130.0\):*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:cisco:wireless_lan_controller_software:8.5\(130.0\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:wireless_lan_controller_software:8.9\(1.52\):*:*:*:*:*:*:*
- (no CPE)
Cisco Systems, Inc./Cisco 1500 Wireless Lan Controllercpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105675nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041928nvdThird Party AdvisoryVDB Entry
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-wlc-idnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000