CVE-2007-2032 Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified v...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless control system | = 4.0 | No fix listed |
| cisco wireless control system | = 4.0.95 | No fix listed |
References
- 24865 third-party-advisory vendor-advisory
- 1017907 vdb-entry
- 20070412 Multiple Vulnerabilities in the Cisco Wireless Control System patch vendor-advisory
- 34132 vdb-entry
- 23460 vdb-entry
- ADV-2007-1367 vdb-entry
- cisco-wcs-ftp-unauthorized-access(33614) vdb-entry