CVE-2007-2040

Опубликовано: 16 апр. 2007

Источник: nvd

CVSS2: 6.2

EPSS Низкий

Описание

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192.

Ссылки

http://securitytracker.com/id?1017908
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
Patch
Vendor Advisory
http://www.osvdb.org/34133
Broken Link
http://www.securityfocus.com/bid/23461
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1368
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/33610
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017908
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
Patch
Vendor Advisory
http://www.osvdb.org/34133
Broken Link
http://www.securityfocus.com/bid/23461
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1368
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/33610
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*

Версия от 3.2 (включая) до 3.2.185.0 (исключая)

cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0.206.0 (исключая)

Одно из

cpe:2.3:h:cisco:aironet_1000-series:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:aironet_1500-series:-:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00092

Низкий

6.2 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4g65-3hrc-pmpq

github

почти 4 года назад