int(3106)

Vulnerability Bulletins


Obtención de acceso en Cisco Wireless LAN Controller

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto con cuenta

System information

Property Value
Affected manufacturer Networking
Affected software Cisco 4400 Series Wireless LAN Controllers
Cisco 2100 Series Wireless LAN Controllers
Cisco Wireless LAN Controller Module
Cisco Catalyst 6500 Series Wireless Services Module (WiSM)
Cisco Catalyst 3750 Series Integrated Wireless LAN Controllers
Cisco Wireless LAN Controller Module
Cisco Aironet 1000 Series
Cisco Aironet 1500 Series

Description

Se ha descubierto una vulnerabilidad en Cisco Wireless LAN Controller (WLC) cuando maneja puntos de acceso Cisco Aironet usando el protocolo Lightweight Access Point (LWAPP).

Un atacante remoto podría causar una denegación de servicio, ver cierta información, modificar la lista de conrtrol de acceso o ganar privilegios de administrador.

Solution



Actualización de software

Cisco
Ver tabla de actualizaciones en:
http://www.cisco.com/en/US/products/products_security_advisory09186a008081e189.shtml#software

Standar resources

Property Value
CVE
BID

Other resources

Cisco Security Advisory (cisco-sa-20070412-wlc)
http://www.cisco.com/en/US/products/products_security_advisory09186a008081e189.shtml

Version history

Version Comments Date
1.0 Aviso emitido 2007-04-16
Ministerio de Defensa
CNI
CCN
CCN-CERT