PT-2004-1541 · Cisco · Cisco Wireless Lan Solution Engine+1

Published 2004-04-16 · Updated 2017-07-11 · CVE-2004-0391

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Solution Engine (WLSE) versions 2.0 through 2.5 Cisco Hosting Solution Engine (HSE) versions 1.7 through 1.7.3

Description The issue allows remote attackers to add new users, modify existing users, and change configuration due to a hardcoded username and password.

Recommendations For Cisco Wireless LAN Solution Engine (WLSE) versions 2.0 through 2.5, consider changing the hardcoded username and password to unique and secure credentials. For Cisco Hosting Solution Engine (HSE) versions 1.7 through 1.7.3, consider changing the hardcoded username and password to unique and secure credentials.

Fix

Related Identifiers

CVE-2004-0391

Affected Products

Cisco Hosting Solution Engine

Cisco Wireless Lan Solution Engine

References · 6

• http://ciac.org/ciac/bulletins/o-111.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/659228 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-0391 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20040407-username.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15773 · Note
• http://securityfocus.com/bid/10076 · Note