CVE-2005-3482
Summary
| CVE | CVE-2005-3482 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-11-03 02:02:00 UTC |
| Updated | 2011-03-08 02:26:00 UTC |
| Description | Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Aironet Ap1131 | All | All | All | All |
| Hardware | Cisco | Aironet Ap1131 | All | All | All | All |
| Hardware | Cisco | Aironet Ap1200 | All | All | All | All |
| Hardware | Cisco | Aironet Ap1200 | All | All | All | All |
| Hardware | Cisco | Aironet Ap1240 | All | All | All | All |
| Hardware | Cisco | Aironet Ap1240 | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Secunia - Advisories - Cisco Wireless LAN Controllers Encryption Bypass Vulnerability | SECUNIA | secunia.com | |
| Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access - CXSecurity.com | SREASON | securityreason.com | |
| Cisco Airespace WLAN Controller Unauthorized Network Access Vulnerability | BID | www.securityfocus.com | |
| 20454 | OSVDB | www.osvdb.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| Cisco - Networking, Cloud, and Cybersecurity Solutions | CISCO | www.cisco.com | Patch, Vendor Advisory |
| SecurityTracker.com Archives - Cisco Airespace Wireless LAN Controller May Allow Use of Unencrypted Connections | SECTRACK | securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.