PT-2007-3377 · Cisco · Cisco Wireless Control System

Publicado 2007-04-16 · Atualizado 2017-07-29 · CVE-2007-2034

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless Control System (WCS) versions prior to 4.0.87.0

Description The issue allows remote authenticated users to gain the privileges of the SuperUsers group, enabling them to manage the application and its networks. This is related to the group membership of user accounts.

Recommendations For versions prior to 4.0.87.0, update to version 4.0.87.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2034

Produtos afetados

Cisco Wireless Control System

Referências · 8

• http://securitytracker.com/id?1017907 · Nota
• http://securityfocus.com/bid/23460 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33612 · Nota
• http://osvdb.org/34130 · Nota
• http://vupen.com/english/advisories/2007/1367 · Aviso do Fabricante
• http://secunia.com/advisories/24865 · Aviso do Fabricante
• http://cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2034 · Nota de Segurança