OSVDB ID: 26878 Title: Cisco Wireless Access Point Local User List Only Configuration Weakness Authentication Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Cisco Wireless Access Point contains a flaw that may allow a malicious user to gain unauthorized administrative access. The issue is triggered when the 'Local User List Only' mode is turned on, which removes all security and password configurations. It is possible that the flaw may allow remote users to access the system resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access,
Wireless Vector
Attack Type: Authentication Management Impact: Loss of Confidentiality Exploit: Exploit Public OSVDB: Web Related |
Solution |
Upgrade to version 12.3(8)JA2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |