CVE-2006-3285

Description

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27438

http://www.vupen.com/english/advisories/2006/2583

http://www.securityfocus.com/bid/18701

http://www.osvdb.org/26884

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

http://securitytracker.com/id?1016398

http://secunia.com/advisories/20870

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS