PT-2009-3726 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2009-07-27 · Atualizado 2009-08-07 · CVE-2009-1167

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) platform versions 4.x through 4.2.204.0 Cisco Wireless LAN Controller (WLC) platform versions 5.x through 5.2.190.0

Description The issue allows remote attackers to modify the configuration via a crafted HTTP or HTTPS request. Multiple vulnerabilities exist in the Cisco Wireless LAN Controller platforms, including a crafted HTTP or HTTPS request unauthorized configuration modification vulnerability.

Recommendations For versions 4.x through 4.2.204.0, update to version 4.2.205.0 or later. For versions 5.x through 5.2.190.0, update to version 5.2.191.0 or later. As a temporary workaround, consider restricting access to the HTTP and HTTPS interfaces until a patch is available.

Correção

Identificadores relacionados

CVE-2009-1167

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 6

• http://cisco.com/en/US/products/products_security_advisory09186a0080adb3d7.shtml · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090727-wlc · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/2021 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1167 · Nota de Segurança
• http://securitytracker.com/id?1022606 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1167 · Nota de Segurança