Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows…
Priority MEDIUM 43Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the application and its networks, related to the group membership of user accounts, aka Bug ID CSCsg05190.
Why it matters now
EPSS 0.02098 81st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-2034
- 2026-10-03 Alias added: GHSA-7xq8-4w9h-2jrg
References
More Cisco Wireless Control System vulnerabilities
- TI-2007-05169 The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE)… CVSS 2.0HIGH 10.0
- TI-2007-01957 Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under… CVSS 2.0HIGH 7.8
- TI-2006-03186 Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a… CVSS 2.0HIGH 7.5
- TI-2006-03185 The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before… CVSS 2.0HIGH 7.5
- TI-2006-03184 The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before… CVSS 2.0HIGH 7.5
- TI-2007-01954 Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and… CVSS 2.0HIGH 7.5
Sources
- CVE-2007-2034 · CVE Program
- CVE-2007-2034 · NVD
- FIRST EPSS
- GHSA-7xq8-4w9h-2jrg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences