Cisco Unified Wireless Network (UWN) Multiple Security Vulnerabilities

Bugtraq ID:	42387
Class:	Unknown
CVE:	CVE-2010-2975 CVE-2010-2976 CVE-2010-2977 CVE-2010-2978 CVE-2010-2979 CVE-2010-2980 CVE-2010-2981 CVE-2010-2982 CVE-2010-2983 CVE-2010-2984
Remote:	Yes
Local:	Yes
Published:	Jun 24 2010 12:00AM
Updated:	Jun 24 2010 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified Wireless Network (UWN) Multiple Security Vulnerabilities

Cisco Unified Wireless Network (UWN) Solution is prone to multiple security vulnerabilities, including denial of service, authentication bypass, information disclosure, unauthorized access, and an unspecified remote vulnerability.

Exploiting these issues can allow an attacker to deny service to legitimate users, bypass security restrictions, gain unauthorized access, or execute arbitrary code. Other attacks may also be possible.

Versions prior to Cisco Unified Wireless Network (UWN) 7.0.98.0 are vulnerable.

Cisco Unified Wireless Network (UWN) Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and will not require specific exploit code.

Cisco Unified Wireless Network (UWN) Multiple Security Vulnerabilities

Solution:
These issues have been fixed in version 7.0.98.0. Please see the references for more information.

Cisco Unified Wireless Network (UWN) Multiple Security Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points f (Cisco)