Priority LOW 22
Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00845 · Published 2010-08-09 · No fix listed CWE-79
Priority MEDIUM 48
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended access restrictions via WL…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02516 · Published 2010-08-09 · No fix listed
Priority LOW 36
The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (dropped connection) via a series of spoofed EAPoL-Lo…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-08-09 · No fix listed
Priority LOW 34
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID CSCtb74037.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.01222 · Published 2010-08-09 · No fix listed CWE-200
Priority LOW 33
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface, aka Bug ID CSCte55370.
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0106 · Published 2010-08-09 · No fix listed
Priority LOW 36
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic, aka Bug ID CSCt…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-08-09 · No fix listed CWE-119
Priority LOW 36
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that trigger an ARP storm,…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01205 · Published 2010-08-09 · No fix listed CWE-119
Priority MEDIUM 46
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01795 · Published 2010-08-09 · No fix listed CWE-310
Priority MEDIUM 45
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01282 · Published 2010-08-09 · No fix listed CWE-16
Priority MEDIUM 47
The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0213 · Published 2010-08-09 · No fix listed CWE-255
Priority LOW 11
Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bu…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00309 · Published 2010-08-09 · No fix listed CWE-200