Unscored severity · published Jun 28, 2006
CVE-2006-3285
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote…
–
CVSS
2.7%
EPSS
No
On KEV
Description
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WC
Wireless Control System · Cisco
through 3.2\(40\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3285
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3285
secunia.com
http://secunia.com/advisories/20870
securitytracker.com
http://securitytracker.com/id?1016398
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml
www.osvdb.org
http://www.osvdb.org/26884
www.securityfocus.com
http://www.securityfocus.com/bid/18701
www.vupen.com
http://www.vupen.com/english/advisories/2006/2583
More from Wireless Control System
–
CVE-2012-5990
Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote…
–
CVE-2007-5382
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts…
–
CVE-2007-2032
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary…
–
CVE-2007-2035
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain…
–
CVE-2007-2034
Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the…