CVEvulnerability
CVE-2007-5382
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges.
Affected configurations
• cisco wireless lan solution engine (<= 4.1.91.0)
• cisco wireless control system 4.1.91.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/37936 osvdb.org
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml www.cisco.com
- http://www.securityfocus.com/bid/26000 www.securityfocus.com
- http://www.securitytracker.com/id?1018797 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3456 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37053 exchange.xforce.ibmcloud.com
- http://osvdb.org/37936 osvdb.org
- http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml www.cisco.com
- http://www.securityfocus.com/bid/26000 www.securityfocus.com
- http://www.securitytracker.com/id?1018797 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3456 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37053 exchange.xforce.ibmcloud.com