PT-2007-6433 · Cisco · Ciscoworks Wireless Lan Solution Engine+1

Published 2007-10-12 · Updated 2017-07-29 · CVE-2007-5382

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CiscoWorks Wireless LAN Solution Engine (WLSE) versions 4.1.91.0 and earlier

Description: The issue arises from the conversion utility used to migrate from CiscoWorks Wireless LAN Solution Engine (WLSE) to Cisco Wireless Control System (WCS), which creates administrator accounts with default usernames and passwords. This allows remote attackers to gain privileges.

Recommendations: For CiscoWorks Wireless LAN Solution Engine (WLSE) versions 4.1.91.0 and earlier, change the default administrator usernames and passwords created by the conversion utility to secure credentials as soon as possible after the migration to Cisco Wireless Control System (WCS).

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5382

Affected Products

Cisco Wireless Control System

Ciscoworks Wireless Lan Solution Engine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-5382 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37053 · Note
• http://vupen.com/english/advisories/2007/3456 · Note
• http://securitytracker.com/id?1018797 · Note
• http://osvdb.org/37936 · Note
• http://securityfocus.com/bid/26000 · Note