CVEvulnerability
CVE-2010-2986
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID CSCtf14288.
Affected configurations
• cisco wireless control system software (<= 6.0.188.0)
• cisco wireless control system software 3.2.78.0
• cisco wireless control system software 4.0.155.5
• cisco wireless control system software 4.1
• cisco wireless control system software 4.1.83.0
• cisco wireless control system software 4.1.91.0
• cisco wireless control system software 4.1.171.0
• cisco wireless control system software 4.1.191.xm
• cisco wireless control system software 4.1.192.35m
• cisco wireless control system software 4.1.192.xm
• cisco wireless control system software 4.2.62.0
• cisco wireless control system software 4.2.62.11
• cisco wireless control system software 4.2.81.0
• cisco wireless control system software 4.2.97.0
• cisco wireless control system software 4.2.110.0
• cisco wireless control system software 4.2.128.0
• cisco wireless control system software 4.2.130.0
• cisco wireless control system software 4.2.173.0
• cisco wireless control system software 4.2.176.0
• cisco wireless control system software 4.2.209.0
• cisco wireless control system software 5.0.56.0
• cisco wireless control system software 5.0.56.2
• cisco wireless control system software 5.0.148.0
• cisco wireless control system software 5.1.64.0
• cisco wireless control system software 5.1.65.4
• cisco wireless control system software 5.1.151.0
• cisco wireless control system software 5.2.110.0
• cisco wireless control system software 5.2.125.0
• cisco wireless control system software 5.2.130.0
• cisco wireless control system software 5.2.148.0
• cisco wireless control system software 5.2.157.0
• cisco wireless control system software 6.0
• cisco wireless control system software 6.0.132.0
• cisco wireless control system software 6.0.170.0
• cisco wireless control system software 6.0.181.0
• cisco wireless control system software 6.0.182.0
• cisco wireless control system software 7.0
• cisco wireless control system software 7.0.98.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/40827 Vendor Advisory
- http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html www.cisco.com
- http://www.securityfocus.com/archive/1/512878/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/42216 www.securityfocus.com
- http://www.tomneaves.com/Cisco_Wireless_Control_System_XSS.txt Exploit
- http://secunia.com/advisories/40827 Vendor Advisory
- http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html www.cisco.com
- http://www.securityfocus.com/archive/1/512878/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/42216 www.securityfocus.com
- http://www.tomneaves.com/Cisco_Wireless_Control_System_XSS.txt Exploit