PT-2007-3377 · Cisco · Cisco Wireless Control System

Published 2007-04-16 · Updated 2017-07-29 · CVE-2007-2034

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless Control System (WCS) versions prior to 4.0.87.0

Description The issue allows remote authenticated users to gain the privileges of the SuperUsers group, enabling them to manage the application and its networks. This is related to the group membership of user accounts.

Recommendations For versions prior to 4.0.87.0, update to version 4.0.87.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2034

Affected Products

Cisco Wireless Control System

References · 8

• http://vupen.com/english/advisories/2007/1367 · Vendor Advisory
• http://secunia.com/advisories/24865 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2034 · Security Note
• http://securitytracker.com/id?1017907 · Note
• http://securityfocus.com/bid/23460 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33612 · Note
• http://osvdb.org/34130 · Note