PT-2005-4278 · Cisco+1 · Cisco 1240 Series Access Points+3

Publicado 2005-11-03 · Atualizado 2011-03-08 · CVE-2005-3482

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco 1200, 1131, and 1240 series Access Points versions (affected versions not specified) Airespace WLAN controllers versions 3.1.59.24

Description The issue allows remote attackers to send unencrypted traffic to a secure network by using frames with the MAC address of an authenticated end host, when the access points are operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by the specified WLAN controllers.

Recommendations For Cisco 1200, 1131, and 1240 series Access Points, consider restricting access to the network until a fix is available. For Airespace WLAN controllers version 3.1.59.24, restrict the use of LWAPP mode to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3482

Produtos afetados

Airespace Wlan Controllers

Cisco 1131 Series Access Points

Cisco 1200 Series Access Points

Cisco 1240 Series Access Points

Referências · 8

• http://securityfocus.com/bid/15272 · Nota
• http://vupen.com/english/advisories/2005/2278 · Nota
• http://secunia.com/advisories/17406 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml · Aviso do Fabricante
• http://osvdb.org/20454 · Nota
• http://securityreason.com/securityalert/139 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3482 · Nota de Segurança
• http://securitytracker.com/id?1015140 · Nota