PT-2007-3379 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2007-04-12 · Atualizado 2018-10-30 · CVE-2007-2036

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions prior to 20070419

Description The issue concerns the SNMP implementation in the Cisco Wireless LAN Controller, which uses default community strings, allowing remote attackers to access and modify SNMP variables. Additionally, the WLC contains multiple vulnerabilities that could lead to a denial of service condition, information disclosure, access control list changes, or allow an attacker to gain full administrative access.

Recommendations For versions prior to 20070419, update to a version released after 20070419 to address the vulnerabilities. As a temporary workaround, consider changing the default read-only and read-write community strings to custom values to prevent unauthorized access. Restrict access to the SNMP service to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2036

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 9

• http://securitytracker.com/id?1017908 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1368 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33604 · Nota
• http://securityfocus.com/bid/23461 · Nota
• http://osvdb.org/34134 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Aviso do Fabricante
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2036 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2007-2036 · Nota de Segurança