CVEvulnerability
CVE-2007-2032
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014.
Affected configurations
• cisco wireless control system 4.0
• cisco wireless control system 4.0.95
References
- http://secunia.com/advisories/24865 Vendor Advisory
- http://securitytracker.com/id?1017907 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Patch
- http://www.osvdb.org/34132 www.osvdb.org
- http://www.securityfocus.com/bid/23460 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1367 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33614 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/24865 Vendor Advisory
- http://securitytracker.com/id?1017907 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Patch
- http://www.osvdb.org/34132 www.osvdb.org
- http://www.securityfocus.com/bid/23460 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1367 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33614 exchange.xforce.ibmcloud.com