CVE-2007-2032
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014.
Cisco Wireless Control System (WCS) anterior a 4.0.96.0 tiene el nombre de usuario y la contraseña fija en el código para operaciones de backup, lo cual permite a atacantes remotos leer y modificar archivos de su elección mediante vectores no especificados relacionados con "propiedades del servidor FTP", también conocido como Bug ID CSCse93014.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-04-16 CVE Reserved
- 2007-04-16 CVE Published
- 2024-06-11 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1017907 | Vdb Entry | |
| http://www.osvdb.org/34132 | Vdb Entry | |
| http://www.securityfocus.com/bid/23460 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/1367 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/33614 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml | 2017-07-29 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/24865 | 2017-07-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Wireless Control System Search vendor "Cisco" for product "Wireless Control System" | 4.0 Search vendor "Cisco" for product "Wireless Control System" and version "4.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Wireless Control System Search vendor "Cisco" for product "Wireless Control System" | 4.0.95 Search vendor "Cisco" for product "Wireless Control System" and version "4.0.95" | - |
Affected
| ||||||