CVE-2006-3291
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%
The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the “Local User List Only (Individual Passwords)” setting, which removes all security and password configurations and allows remote attackers to access the system.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:ios | cisco ios | eq | 12.3\(8\)ja |
| cisco:ios | cisco ios | eq | 12.3\(8\)ja1 |
Related
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%