NVD

Id
61970  
Name
CVE-2006-3291  
Description
The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only (Individual Passwords)" setting, which removes all security and password configurations and allows remote attackers to access the system.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-28  
Modified Date
2011-03-07  
Seq
2006-3291  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
320809 61970 CVE-2006-3291 1016399  View
320810 61970 CVE-2006-3291 20060628 Access Point Web-browser Interface Vulnerability  View
320811 61970 CVE-2006-3291 VU#544484  View
320812 61970 CVE-2006-3291 18704  View
320813 61970 CVE-2006-3291 ADV-2006-2584  View
320814 61970 CVE-2006-3291 cisco-ap-browser-unauth-access(27437)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58163 JVNDB-2006-000359 Cisco Access Points の Web ブラウザインタフェースに認証を回避される脆弱性 Cisco IOS が動作する Cisco Access Points の Web ブラウザインタフェースには、管理ページで認証方法の設定を "Default Authentication (Global Password)" から "Local User List Only (Individual Passwords)" に変更した場合、Global Password および Individual Passwords の双方の設定が無効となってしまう脆弱性が存在します。 CVE-2006-3291 19393 CVE-2006-3291 61970 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000359.html 2006-06-28 2007-04-01 View