Cisco Wireless LAN Controller (WLC) devices with software 4.x 5.x 6.0 and 7.0 before 7.0.220.0 and 7.1 before 7.1.91.0 when WebAuth is enabled allow remote attackers to cause a denial of service (device reload) via a sequence of (1) HTTP or (2) HTTPS packets aka Bug ID CSCtt47435.