CVE-2010-2976

CVE-2010-2976 affects Cisco Unified Wireless Network (UWN) Solution controllers on 7.x up to 7.0.98.0. The issue arises from default SNMP configurations: read-only community set to public, read-write community set to private, and default SNMPv3 username/passwords. This insecure default enables re...

CVE-2010-2982

CVE-2010-2982 affects Cisco Unified Wireless Network (UWN) Solution 7.x, prior to 7.0.98.0. The vulnerability enables remote attackers to discover a group password by issuing a series of SNMP requests (as demonstrated by an SNMP walk), per Bug ID CSCtb74037. Root cause involves insecure SNMP hand...

CVE-2010-2975

Technical details about CVE-2010-2975 are not publicly available in the provided documents. Monitor for updates; the materials here do not specify affected products, root cause, impact, or remediations beyond the generic description.

CVE-2010-2979

CVE-2010-2979 affects Cisco UWN Solution 7.x on 5508 controllers prior to 7.0.98.0. Remote ARP requests can trigger an ARP storm causing a buffer leak and device crash (Bug CSCte43508). Governmented by NVD: CVSS v2 base 7.8 (NETWORK, LOW complexity, no auth). Remediation: upgrade to 7.0.98.0 or l...

CVE-2010-2988

The CVE-2010-2988 entry concerns a Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x prior to 7.0.98.0. Affected product: Cisco UWN. Vulnerable component/behavior: an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspe...

CVE-2010-2981

CVE-2010-2981 affects Cisco Unified Wireless Network (UWN) Solution 7.x prior to 7.0.98.0. A remote attacker can cause a denial of service (device crash) by pinging a virtual interface (Bug ID CSCte55370). The available connected sources confirm the product family and vulnerable version range, an...

CVE-2010-2977

Cisco CVE-2010-2977 affects Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, which does not properly implement TLS/SSL. Impact is listed as unspecified in the sources, with remote attack vectors noted; no specific affected components, versions beyond the 7.x line, or exploit det...

CVE-2010-2983

The CVE-2010-2983 issue affects Cisco Unified Wireless Network (UWN) Solution 7.x, where the workgroup bridge (WGB) functionality allows remote attackers to cause a denial of service (dropped connection) by sending a sequence of spoofed EAPoL-Logoff frames. Root cause is tied to an EAPoL logoff a...

CVE-2010-2984

CVE-2010-2984 affects Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers. The vulnerability stems from improper implementation of the WEBAUTH_REQD state, allowing remote attackers to bypass intended access restrictions via WLAN traffic (Bug ID CSCtb75305)...

CVE-2010-2978

Cisco Unified Wireless Network (UWN) Solution 7.x is affected by CVE-2010-2978 due to use of an inadequate message-digest algorithm for a self-signed certificate. The vulnerability allows remote attackers to bypass intended access restrictions via collision-related vectors. The issue is associate...

CVE-2010-2980

CVE-2010-2980 affects Cisco Unified Wireless Network (UWN) Solution 7.x prior to 7.0.98.0 running on 5508 series controllers. The issue allows remote attackers to cause a denial of service via fragmented traffic, resulting in pbuf exhaustion and a device crash. This CVE is documented with Bug ID ...