vulnwire
9.3crit

CVE-2006-3291in critical feed

The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itsel…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.8%
percentile 90%
Public exploits
0
none known

The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only (Individual Passwords)" setting, which removes all security and password configurations and allows remote attackers to access the system.

Exploit prediction (EPSS)

3.81% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
Technology feeds
Cisco IOS (RSS, critical only)

References

  • securityfocus.com /bid/18704 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/27437 · vdb-entry, x_refsource_XF, x_transferred
  • cisco.com /warp/public/707/cisco-sa-20060628-ap.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • osvdb.org /26878 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securitytracker.com /id?1016399 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • vupen.com /english/advisories/2006/2584 · vdb-entry, x_refsource_VUPEN, x_transferred
  • kb.cert.org /vuls/id/544484 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/20860 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.