CVE-2007-5382

The CVE-2007-5382 entry concerns the CiscoWorks WLSE conversion utility (versions 4.1.91.0 and earlier) that converts to Cisco WCS. The underlying issue is that the conversion process creates administrator accounts with default usernames and passwords, enabling remote attackers to gain privileges...

CVE-2007-5382

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine WLSE 4.1.91.0 and earlier to Cisco Wireless Control System WCS creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges...

Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password Advisory ID: cisco-sa-20071010-wcs http://www.cisco.com/warp/public/707/cisco-sa-20071010-wcs.shtml Revision 1.0 For Public Release 2007 October 10 1600 UT...

CiscoWorks Wireless LAN Solution Engine Cisco Wireless Control System Conversion Utility default password

Conversion utility adds default password...

Cisco无线控制系统默认管理口令漏洞

BUGTRAQ ID: 26000 Cisco无线控制系统（WCS）是用于管理和控制Cisco统一无线网络的轻量级接入点和无线LAN控制器的集中系统级应用。 WCS在完成转换以后没有正确处理默认的帐号口令，远程攻击者可能利用此漏洞获取非授权访问。 CiscoWorks无线LAN解决方案引擎（WLSE）用户可以使用Cisco提供的转换工具转换到Cisco无线控制系统（WCS），这个转换工具使用默认的凭据创建和使用管理帐号。由于在转换过程中对更改这些凭据没有任何要求，因此攻击者可以利用这些拥有默认凭据的帐号在转换后获得对WCS的完全管理控制。 Cisco Wireless Control...

CVE-2007-1467

The CVE-2007-1467 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting Cisco Secure Access Control Server and related Cisco products. The root issue is insufficient input filtering in the search form used by PreSearch.html and PreSearch.class, allowing remote attackers to...

CVE-2006-1960

Cross-site scripting XSS vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug I...

CVE-2006-1961

Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...

Cross site scripting

Cross-site scripting XSS vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug I...

CVE-2006-1961

Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13, Hosting Solution Engine HSE and User Registration Tool URT before 20060419, and all versions of Ethernet Subscriber Solution Engine ESSE and CiscoWorks2000 Service Management Solution SMS allow local users to gain...

CVE-2006-1960

The CVE-2006-1960 issue affects CiscoWorks WLSE and WLSE Express prior to 2.13 in their appliance web UI. The vulnerability is an XSS flaw in the archiveApplyDisplay.jsp path, likely via the displayMsg parameter, enabling remote attackers to inject arbitrary web script/HTML. The connected sources...

CVE-2006-1961

CiscoWorks WLSE/WLSE Express <2.13, HSE and URT

CVE-2006-1960

Cross-site scripting XSS vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine WLSE and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug I...

Multiple vulnerabilities in Linux based Cisco products

Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 19-Apr-2006 Software: Cisco Wireless Lan Solution Engine WLSE Cisco Hosting Solution Engine HSE Cisco Ethernet Subscriber Solution Engine ESSE Cisco User Registration Tool URT CiscoWorks2000...

Multiple CiscoWorks Wireless LAN LAN Solution Engine / Cisco User Registration Tool / Cisco Hosting Solution Engine security vulnerabilities

Crossite scripting, command line escape...

CiscoWorks Management Console Detection (HTTP)

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2006 TNS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.19559";...

Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation ===================================================================== Advisory ID: cisco-sa-20051129-csa http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml...

CiscoWorks Management Console Detection

The remote host appears to be running CiscoWorks, a LAN Management solution, on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19559; scriptversion"1.12"; scriptnameenglish:"CiscoWorks Management Console Detection"; scriptsummaryenglish:"Checks for...

CVE-2005-2695

Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors IDSMC 2.0 and 2.1, and Monitoring Center for Security Security Monitor or Secmon 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco Intrusion Detection Sens...

CVE-2005-2695

Technical details (affected components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates to CVE-2005-2695 in the included records (NVD/CVE/CVELIST) for new information.