← Vulnerability feed

Vulnerability record · CVE-2009-1166 · published 29 July 2009

CVE-2009-1166: Cisco catalyst vulnerability

Cisco · Catalyst

The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.

7.8 CVSS 2.0 High EPSS 1.6% · top 25.2%
7.8CVSS 2.0 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml PatchVendor Advisory
http://www.securitytracker.com/id?1022605
http://www.vupen.com/english/advisories/2009/2021
http://www.cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml PatchVendor Advisory
http://www.securitytracker.com/id?1022605
http://www.vupen.com/english/advisories/2009/2021

Track CVE-2009-1166 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2005-4258Cisco catalyst vulnerabilityUnspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and dest…EPSS 2.1%7.5CVE-2005-1942Cisco catalyst vulnerabilityCisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Pr…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2009-1166), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.