OSVDB ID: 26882

Title: Cisco Wireless Control System (WCS) Default root Account Password

Info

Disclosure
Jun 28, 2006

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 By default, Wireless Control System installs with a default password. The "root" account has a password of "public" which is publicly known and documented. This allows attackers to trivially access the program or system.

Classification

 Location: Remote / Network Access, Wireless Vector
Attack Type: Authentication Management
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Change the root password.

Products

Cisco Systems, Inc.

Wireless Control System

 3.1(33)
3.2(23)
3.2(25)
3.2(40)
3.2(51)
4.0(1)

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/26882