CVE-2007-2040

2007-04-1621:19:00

[email protected]

web.nvd.nist.gov

cisco

aironet

lightweight access points

hard-coded password

cve-2007-2040

nvd

bug id cscsg15192

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.2%

JSON

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192.

Affected configurations

NVD

Node

ciscowireless_lan_controller_softwareRange3.2–3.2.185.0

ciscowireless_lan_controller_softwareRange4.0–4.0.206.0

AND

ciscoaironet_1000-seriesMatch-

ciscoaironet_1500-seriesMatch-

CPENameOperatorVersion
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwarelt3.2.185.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwarelt4.0.206.0

CPE	Name	Operator	Version
cisco:wireless_lan_controller_software	cisco wireless lan controller software	lt	3.2.185.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	lt	4.0.206.0