Cisco Unified Wireless Network Solution Software vulnerabilities

11 CVEs affecting Cisco Unified Wireless Network Solution Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2988, published 2010-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2984, published 2010-08-10. High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended…
CVE-2010-2976, published 2010-08-10. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a…
CVE-2010-2978, published 2010-08-10. High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended…
CVE-2010-2977, published 2010-08-10. High severity, CVSS 10.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.
CVE-2010-2982, published 2010-08-10. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID…
CVE-2010-2983, published 2010-08-10. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (dropped connection) via a…
CVE-2010-2980, published 2010-08-10. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented…
CVE-2010-2979, published 2010-08-10. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that…
CVE-2010-2981, published 2010-08-10. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface, aka Bug ID CSCte55370.
CVE-2010-2988, published 2010-08-10. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…