Vulnerability Details CVE-2007-2035
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.4%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/24865
- http://securitytracker.com/id?1017907
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
- http://www.osvdb.org/34131
- http://www.securityfocus.com/bid/23460
- http://www.vupen.com/english/advisories/2007/1367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33606
- http://secunia.com/advisories/24865
- http://securitytracker.com/id?1017907
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
- http://www.osvdb.org/34131
- http://www.securityfocus.com/bid/23460
- http://www.vupen.com/english/advisories/2007/1367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33606
Products affected by CVE-2007-2035
-
cpe:2.3:h:cisco:wireless_control_system:-
-
cpe:2.3:h:cisco:wireless_control_system:3.2(40)
-
cpe:2.3:h:cisco:wireless_control_system:3.2(51)
-
cpe:2.3:h:cisco:wireless_control_system:4.0
-
cpe:2.3:h:cisco:wireless_control_system:4.0(1)
-
cpe:2.3:h:cisco:wireless_control_system:4.0.95