Lucene search
HistoryJun 28, 2006 - 10:05 p.m.
CVE-2006-3285
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.025
Percentile
90.1%
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).
Affected configurations
Node
ciscowireless_control_systemRange≤3.2\(40\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | wireless_control_system | * | cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2006-3285
2006-06-28 22:05:00
cvelist
cvelist
CVE-2006-3285
2006-06-28 22:00:00
cisco
cisco
Multiple Vulnerabilities in Wireless Control System
2006-06-28 16:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.025
Percentile
90.1%
Related for NVD:CVE-2006-3285