Cisco Wireless Control System — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Wireless Control System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2007-5382 — CVSS 10.0 (critical): The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System…
• CVE-2007-2034 — CVSS 9.0 (critical): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges…
• CVE-2007-2035 — CVSS 7.8 (high): Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which…
• CVE-2006-3287 — CVSS 7.5 (high): Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password…
• CVE-2006-3285 — CVSS 7.5 (high): The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username…
• CVE-2007-2032 — CVSS 7.5 (high): Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote…
• CVE-2006-3286 — CVSS 7.5 (high): The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password…
• CVE-2007-2033 — CVSS 6.5 (medium): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any…
• CVE-2006-3290 — CVSS 5.0 (medium): HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root…
• CVE-2006-3288 — CVSS 5.0 (medium): Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured…
• CVE-2012-5990 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless…
• CVE-2007-1467 — CVSS 3.5 (low): Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server…
• CVE-2006-3289 — CVSS 2.6 (low): Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and…