Lucene search

K
cveMitreCVE-2007-2040
HistoryApr 16, 2007 - 9:19 p.m.

CVE-2007-2040

2007-04-1621:19:00
mitre
web.nvd.nist.gov
22
cisco
aironet
lightweight access points
hard-coded password
cve-2007-2040
nvd
bug id cscsg15192

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

54.2%

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192.

Affected configurations

Nvd
Node
ciscowireless_lan_controller_softwareRange3.23.2.185.0
OR
ciscowireless_lan_controller_softwareRange4.04.0.206.0
AND
ciscoaironet_1000-seriesMatch-
OR
ciscoaironet_1500-seriesMatch-
VendorProductVersionCPE
ciscowireless_lan_controller_software*cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*
ciscoaironet_1000-series-cpe:2.3:h:cisco:aironet_1000-series:-:*:*:*:*:*:*:*
ciscoaironet_1500-series-cpe:2.3:h:cisco:aironet_1500-series:-:*:*:*:*:*:*:*

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

54.2%