CVE-2007-2034

Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the application and its networks, related to the group membership of user accounts, aka Bug ID CSCsg05190.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
http://www.securityfocus.com/bid/23460
http://securitytracker.com/id?1017907
http://secunia.com/advisories/24865	Vendor Advisory
http://www.osvdb.org/34130
http://www.vupen.com/english/advisories/2007/1367	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33612

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*

Information

Published : 2007-04-16 14:19

Updated : 2017-07-28 18:31

NVD link : CVE-2007-2034

Mitre link : CVE-2007-2034

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

cisco

wireless_control_system

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml", "name": "20070412 Multiple Vulnerabilities in the Cisco Wireless Control System", "tags": [], "refsource": "CISCO"}, {"url": "http://www.securityfocus.com/bid/23460", "name": "23460", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1017907", "name": "1017907", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/24865", "name": "24865", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/34130", "name": "34130", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2007/1367", "name": "ADV-2007-1367", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33612", "name": "cisco-wcs-account-privilege-escalation(33612)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the application and its networks, related to the group membership of user accounts, aka Bug ID CSCsg05190."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-2034", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-04-16T21:19Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.0.95"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-29T01:31Z"}