{"api_version":"1","generated_at":"2026-07-24T20:48:48+00:00","cve":"CVE-2009-0062","urls":{"html":"https://cve.report/CVE-2009-0062","api":"https://cve.report/api/cve/CVE-2009-0062.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0062","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0062"},"summary":{"title":"CVE-2009-0062","description":"Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels.","state":"PUBLISHED","assigner":"cisco","published_at":"2009-02-05 00:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9","severity":"","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/bid/33608","name":"http://www.securityfocus.com/bid/33608","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Multiple Cisco Wireless LAN Controllers Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1021678","name":"http://www.securitytracker.com/id?1021678","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Wireless LAN Controller Lets Remote Authenticated Users Gain Elevated Privileges - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers  [Products & Services] - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/33749","name":"http://secunia.com/advisories/33749","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Products Denial of Service and Security Bypass Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0062","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0062","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"catalyst_3750_series_integrated_wireless_lan_controller","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"catalyst_3750_series_integrated_wireless_lan_controller","cpe6":"4.2.173.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"catalyst_6500_wireless_services_modules","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"catalyst_6500_wireless_services_modules","cpe6":"4.2.173.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"wireless_lan_controller_software","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"62","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"cisco","cpe5":"wireless_lan_controller_software","cpe6":"4.2.173.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:24:17.028Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20090204 Multiple Vulnerabilities in Cisco Wireless LAN Controllers","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml"},{"name":"33608","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33608"},{"name":"33749","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/33749"},{"name":"1021678","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021678"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-02-04T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-02-10T10:00:00.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"20090204 Multiple Vulnerabilities in Cisco Wireless LAN Controllers","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml"},{"name":"33608","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33608"},{"name":"33749","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/33749"},{"name":"1021678","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021678"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2009-0062","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20090204 Multiple Vulnerabilities in Cisco Wireless LAN Controllers","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6c1dd.shtml"},{"name":"33608","refsource":"BID","url":"http://www.securityfocus.com/bid/33608"},{"name":"33749","refsource":"SECUNIA","url":"http://secunia.com/advisories/33749"},{"name":"1021678","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021678"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2009-0062","datePublished":"2009-02-05T00:00:00.000Z","dateReserved":"2009-01-07T00:00:00.000Z","dateUpdated":"2024-08-07T04:24:17.028Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-02-05 00:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D797EE92-8C85-4C83-A96A-DF1922712742"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3750_series_integrated_wireless_lan_controller:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"7116274D-F131-42CC-99DA-F22CC39E4525"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8E96B28A-CF63-48C9-8B8E-8BC432A6A5EF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_wireless_services_modules:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"75E04EA5-F134-4930-97CB-BD68484403FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DC1E1F40-ECB6-42FB-838E-998B1893D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:wireless_lan_controller_software:4.2.173.0:*:*:*:*:*:*:*","matchCriteriaId":"57C6B8CB-9277-463B-84EB-AEF36EE40E7B"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"62","Ordinal":"1","Title":"CVE-2009-0062","CVE":"CVE-2009-0062","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"62","Ordinal":"1","NoteData":"Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors, as demonstrated by escalation from the (1) Lobby Admin and (2) Local Management User privilege levels.","Type":"Description","Title":"CVE-2009-0062"},{"CveYear":"2009","CveId":"62","Ordinal":"2","NoteData":"2009-02-04","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"62","Ordinal":"3","NoteData":"2009-02-10","Type":"Other","Title":"Modified"}]}}}