Description
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).
References
- ADV-2006-2583 vdb-entry
- 26884 vdb-entry
- 20870 third-party-advisory
- 20060628 Multiple Vulnerabilities in Wireless Control System vendor-advisory
- 1016398 vdb-entry
- cisco-wcs-default-database-account(27438) vdb-entry
- 18701 vdb-entry