/images/ on the WLC

[fowlermp1]

On my WLC, our security scans are showing that the WLC responds with the presence of a /images/ folder. When you browse to the WLC, https://10.x.y.z/images/ I get a EmWeb Server splash page that shows up.

Anyone know of a way to turn this off or disable it? It a constant nagging thing from our security folks.

WLC model is a NMEWLC-12 running 7.0.235.0 code.

[Stephen Rodriguez]

nothing to my knowledge.  this would be the location of the AP images, so it does need to be reachable.

If it's truly something you are worried about have your Cisco SE get involved and get a PERS put in place.

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[David Watkins]

I believe this is actually the location of the internal webauth "images" folder. 

For instance, if you navigate to your WLCs address

https://wlcipaddress/login.html

You will find the internal WebAuth splash page.  If you view the page source, you will see the banner image at the top is contained within the images directory...

One of several instances in the login.html internal page

This shouldn't contain any AP images or be of any concern.

[David Watkins]

Also, EoS/EoL indicates

http://www.cisco.com/en/US/prod/collateral/modules/ps2797/ps6730/end_of_life_notice_c51-691054.html

End of SW Maintenance Releases Date: OS SW, HW

The last date that Cisco Engineering may release any final software maintenance releases or bug fixes. After this date, Cisco Engineering will no longer develop, repair, maintain, or test the product software.

April 23, 2013

I highly doubt you would be able to push "any" fixes through engineering for this product at this point.