Cisco Wireless LAN Controller CVE-2010-3034 ACL Security Bypass Vulnerability

Bugtraq ID:	43069
Class:	Design Error
CVE:	CVE-2010-3034
Remote:	Yes
Local:	No
Published:	Sep 08 2010 12:00AM
Updated:	Sep 13 2010 12:52PM
Credit:	Cisco
Vulnerable:	Cisco WLC Modules for Integrated Services Routers 0 Cisco Wireless Services Modules (WiSM) 0 Cisco Wireless LAN Control 6.0 Cisco Wireless LAN Control 5.2 Cisco Wireless LAN Control 5.1 Cisco Wireless LAN Control 5.0 Cisco Wireless LAN Control 4.2 M Cisco Wireless LAN Control 4.2 Cisco Catalyst 3750G 0 Cisco 4400 Wireless LAN Controller (WLC) 0 Cisco 4100 Wireless LAN Controller (WLC) 0 Cisco 2100 Wireless LAN Controller (WLC) 0 Cisco 2000 Wireless LAN Controller (WLC) 0
Not Vulnerable:	Cisco Wireless LAN Control 6.0.196.0 Cisco Wireless LAN Control 5.2.193.11 Cisco Wireless LAN Control 4.2.209.0 Cisco Wireless LAN Control 4.2.207.54M

Cisco Wireless LAN Controller CVE-2010-3034 ACL Security Bypass Vulnerability

Cisco Wireless LAN Controller is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions.

This issue is being tracked by Cisco BugID CSCtf36051.

Cisco Wireless LAN Controller CVE-2010-3034 ACL Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Wireless LAN Controller CVE-2010-3034 ACL Security Bypass Vulnerability

Solution:
The vendor has released an update. Please see the references for details.

Cisco Wireless LAN Controller CVE-2010-3034 ACL Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controll (Cisco)