Vulnerability CVE-2007-5382
Published: 2007-10-11   Modified: 2012-02-12

Description:
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges.

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Cisco -> Wireless lan solution engine 
Cisco -> Wireless control system 

 References:
http://www.vupen.com/english/advisories/2007/3456
http://www.securityfocus.com/bid/26000
http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml
http://osvdb.org/37936
http://xforce.iss.net/xforce/xfdb/37053
http://www.securitytracker.com/id?1018797
Copyright 2024, cxsecurity.com

 

Back to Top