CVE-2007-5382 The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames a...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wireless lan solution engine | <= 4.1.91.0 | No fix listed |
| cisco wireless control system | = 4.1.91.0 | No fix listed |
References
- 37936 vdb-entry
- 20071010 Cisco Wireless Control System Conversion Utility Adds Default Password vendor-advisory
- 26000 vdb-entry
- 1018797 vdb-entry
- ADV-2007-3456 vdb-entry
- ciscowcs-default-password-admin-account(37053) vdb-entry