CVE-2007-5382

Cisco Wireless LAN Solution Engine < 4.1.91.0 - Default Administrator Credentials in WLSE-to-WCS Conversion Utility

Title source: llm

Description

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges.

References (6)

Core 6

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018797

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/37053

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/3456

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26000

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/37936

Scores

EPSS 0.0257

EPSS Percentile 83.5%

Details

CWE

CWE-264

Status published

Products (2)

cisco/wireless_control_system 4.1.91.0

cisco/wireless_lan_solution_engine < 4.1.91.0

Published Oct 12, 2007

Tracked Since Feb 18, 2026