Description
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014.
References
- 20070412 Multiple Vulnerabilities in the Cisco Wireless Control System vendor-advisory
- ADV-2007-1367 vdb-entry
- 1017907 vdb-entry
- 23460 vdb-entry
- 24865 third-party-advisory
- 34132 vdb-entry
- cisco-wcs-ftp-unauthorized-access(33614) vdb-entry