Lucene search
HistoryJun 28, 2006 - 11:05 p.m.
CVE-2006-3286
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.018
Percentile
88.3%
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951).
Affected configurations
Node
ciscowireless_control_systemRange≤3.2\(51\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | wireless_control_system | * | cpe:2.3:h:cisco:wireless_control_system:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.018
Percentile
88.3%
Related for NVD:CVE-2006-3286