PT-2007-6433 · Cisco · Ciscoworks Wireless Lan Solution Engine+1

Publicado 2007-10-12 · Atualizado 2017-07-29 · CVE-2007-5382

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CiscoWorks Wireless LAN Solution Engine (WLSE) versions 4.1.91.0 and earlier

Description: The issue arises from the conversion utility used to migrate from CiscoWorks Wireless LAN Solution Engine (WLSE) to Cisco Wireless Control System (WCS), which creates administrator accounts with default usernames and passwords. This allows remote attackers to gain privileges.

Recommendations: For CiscoWorks Wireless LAN Solution Engine (WLSE) versions 4.1.91.0 and earlier, change the default administrator usernames and passwords created by the conversion utility to secure credentials as soon as possible after the migration to Cisco Wireless Control System (WCS).

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5382

Produtos afetados

Cisco Wireless Control System

Ciscoworks Wireless Lan Solution Engine

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/37053 · Nota
• http://vupen.com/english/advisories/2007/3456 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5382 · Nota de Segurança
• http://securitytracker.com/id?1018797 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml · Aviso do Fabricante
• http://osvdb.org/37936 · Nota
• http://securityfocus.com/bid/26000 · Nota