{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-10T00:00:00", "descriptions": [{"lang": "en", "value": "The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-3456", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3456"}, {"name": "20071010 Cisco Wireless Control System Conversion Utility Adds Default Password", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml"}, {"name": "1018797", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018797"}, {"name": "26000", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26000"}, {"name": "ciscowcs-default-password-admin-account(37053)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37053"}, {"name": "37936", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37936"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5382", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-3456", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3456"}, {"name": "20071010 Cisco Wireless Control System Conversion Utility Adds Default Password", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml"}, {"name": "1018797", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018797"}, {"name": "26000", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26000"}, {"name": "ciscowcs-default-password-admin-account(37053)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37053"}, {"name": "37936", "refsource": "OSVDB", "url": "http://osvdb.org/37936"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5382", "datePublished": "2007-10-12T01:00:00", "dateReserved": "2007-10-11T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:wireless_lan_solution_engine:*:*:*:*:*:*:*:*", "matchCriteriaId": "ACDCDB67-42FF-40D3-A308-04431B309496", "versionEndIncluding": "4.1.91.0", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:wireless_control_system:4.1.91.0:*:*:*:*:*:*:*", "matchCriteriaId": "3AA636D6-3DFB-45FD-BCC4-844C33523DE0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges."}, {"lang": "es", "value": "La utilidad de conversi\u00f3n para converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 y versiones anteriores en Cisco Wireless Control System (WCS) crea cuentas de administrador con nombres y contrase\u00f1as por defecto, lo cual permite a atacantes remotos obtener privilegios."}], "id": "CVE-2007-5382", "lastModified": "2017-07-29T01:33:38.583", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-12T01:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/37936"}, {"source": "cve@mitre.org", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00808d72db.shtml"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/26000"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018797"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3456"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37053"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}