PT-2004-1541 · Cisco · Cisco Wireless Lan Solution Engine+1

Publicado 2004-04-16 · Atualizado 2017-07-11 · CVE-2004-0391

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Solution Engine (WLSE) versions 2.0 through 2.5 Cisco Hosting Solution Engine (HSE) versions 1.7 through 1.7.3

Description The issue allows remote attackers to add new users, modify existing users, and change configuration due to a hardcoded username and password.

Recommendations For Cisco Wireless LAN Solution Engine (WLSE) versions 2.0 through 2.5, consider changing the hardcoded username and password to unique and secure credentials. For Cisco Hosting Solution Engine (HSE) versions 1.7 through 1.7.3, consider changing the hardcoded username and password to unique and secure credentials.

Correção

Identificadores relacionados

CVE-2004-0391

Produtos afetados

Cisco Hosting Solution Engine

Cisco Wireless Lan Solution Engine

Referências · 6

• http://ciac.org/ciac/bulletins/o-111.shtml · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15773 · Nota
• http://kb.cert.org/vuls/id/659228 · Correção
• http://securityfocus.com/bid/10076 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0391 · Nota de Segurança
• http://cisco.com/warp/public/707/cisco-sa-20040407-username.shtml · Aviso do Fabricante