Description
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
References
- 33185 vdb-entry
- 20070213 Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account mailing-list
- 24144 third-party-advisory
- 2243 third-party-advisory
- 22538 vdb-entry
- VU#613833 third-party-advisory
- 20070213 Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account mailing-list
- aruba-guestaccount-privilege-escalation(32461) vdb-entry