{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T16:39:49Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20130903-CVE-2013-3474","slug":"cisco-sa-20130903-cve-2013-3474","vendor":"Cisco","title":"Cisco Wireless LAN Controller Multiple Parameter Handling Denial of Service Vulnerability ","summary":"A vulnerability in the Web Administrator Interface of Cisco Wireless LAN Controllers (WLC) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a failure to properly validate certain parameters prior to processing them on the device. An authenticated attacker with an account that is a member of either the Full Manager, Read Only, or Lobby Ambassador managers group could exploit this vulnerability by submitting a request to the affected device that contains a missing or malformed value for specific parameters. An exploit could allow the attacker to crash the device, resulting in a DoS condition, during a system reboot. Cisco has confirmed the vulnerability in a security notice and released software updates. To exploit this vulnerability, an attacker must authenticate to the targeted device. This access requirement limits the likelihood of a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2013-09-03T15:35:31Z","updated_at":"2013-09-03T15:35:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130903-CVE-2013-3474","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20130903-CVE-2013-3474/csaf/Cisco-SA-20130903-CVE-2013-3474.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.01237},"cves":[{"id":"CVE-2013-3474","kev":false,"epss":{"score":0.01237,"percentile":0.65772,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Wireless LAN Controller (WLC)","slug":"cisco-wireless-lan-controller-wlc","vendor":"Cisco"},"cve":{"id":"CVE-2013-3474"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:33:35Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"3.1.105.0; 3.1.111.0; 3.1.59.24; 3.2.116.21; 3.2.150.10; 3.2.150.6; 3.2.171.5; 3.2.171.6; 3.2.185.0; 3.2.193.5; 3.2.195.10; 3.2.78.0; 4.0.108; 4.0.155.0; 4.0.155.5; 4.0.179.11; 4.0.179.8; 4.0.196; 4.0.206.0; 4.0.217.0; 4.0.219.0; 4.1.171.0; 4.1.181.0; 4.1.185.0; 4.2.112.0; 4.2.117.0; 4.2.130.0; 4.2.173.0; 4.2.174.0; 4.2.176.0; 4.2.182.0; 4.2.61.0; 4.2.99.0; 5.0.148.0; 5.0.148.2; 5.1.151.0; 5.1.152.0; 5.1.160.0; 5.2.157.0; 5.2.169.0; 6.0.182.0; 6.0.188.0; 6.0.196.0; 6.0.199.4; 6.0.202.0; 7.0.116.0; 7.0.220.0; 7.0.98.0; 7.0.98.218; 7.1.91.0; 7.2.103.0; 7.3.101.0; 7.3.112.0; 7.4.100.0; 7.4.100.60; 7.4.110.0; 7.5.102.0","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01237,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2013-09-03T15:35:31Z","updated_at":"2013-09-03T15:35:31Z","advisory_updated_at":"2013-09-03T15:35:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130903-CVE-2013-3474","row_display_order":1}]}