CVE-2004-0391

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-0391
Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.ciac.org/ciac/bulletins/o-111.shtml Patch Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/659228 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/10076
https://exchange.xforce.ibmcloud.com/vulnerabilities/15773
http://www.ciac.org/ciac/bulletins/o-111.shtml Patch Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/659228 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/10076
https://exchange.xforce.ibmcloud.com/vulnerabilities/15773
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:h:cisco:hosting_solution_engine:1.7:*:*:*:*:*:*:*
cpe:2.3:h:cisco:hosting_solution_engine:1.7.0:*:*:*:*:*:*:*
cpe:2.3:h:cisco:hosting_solution_engine:1.7.1:*:*:*:*:*:*:*
cpe:2.3:h:cisco:hosting_solution_engine:1.7.2:*:*:*:*:*:*:*
cpe:2.3:h:cisco:hosting_solution_engine:1.7.3:*:*:*:*:*:*:*
History

20 Nov 2024, 23:48

Type Values Removed Values Added
References () http://www.ciac.org/ciac/bulletins/o-111.shtml - Patch, Vendor Advisory () http://www.ciac.org/ciac/bulletins/o-111.shtml - Patch, Vendor Advisory
References () http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml - Patch, Vendor Advisory () http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml - Patch, Vendor Advisory
References () http://www.kb.cert.org/vuls/id/659228 - Patch, Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/659228 - Patch, Third Party Advisory, US Government Resource
References () http://www.securityfocus.com/bid/10076 - () http://www.securityfocus.com/bid/10076 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15773 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15773 -
Information

Published : 2004-06-01 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-0391

Mitre link : CVE-2004-0391

CVE.ORG link : CVE-2004-0391

JSON object : View

Products Affected

cisco

  • wireless_lan_solution_engine
  • hosting_solution_engine
CWE
NVD-CWE-Other