CVE-2004-0391

Опубликовано: 01 июн. 2004

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.

Ссылки

http://www.ciac.org/ciac/bulletins/o-111.shtml
Patch
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/659228
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/10076
https://exchange.xforce.ibmcloud.com/vulnerabilities/15773
http://www.ciac.org/ciac/bulletins/o-111.shtml
Patch
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/659228
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/10076
https://exchange.xforce.ibmcloud.com/vulnerabilities/15773

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:h:cisco:hosting_solution_engine:1.7:*:*:*:*:*:*:*

cpe:2.3:h:cisco:hosting_solution_engine:1.7.0:*:*:*:*:*:*:*

cpe:2.3:h:cisco:hosting_solution_engine:1.7.1:*:*:*:*:*:*:*

cpe:2.3:h:cisco:hosting_solution_engine:1.7.2:*:*:*:*:*:*:*

cpe:2.3:h:cisco:hosting_solution_engine:1.7.3:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00798

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5j5j-qcr8-cxv4

github

почти 4 года назад