Unscored severity · published Jun 28, 2006
CVE-2006-3288
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured to use a directory path name that…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WC
Wireless Control System · Cisco
through 3.2\(51\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3288
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3288
secunia.com
http://secunia.com/advisories/20870
securitytracker.com
http://securitytracker.com/id?1016398
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml
www.osvdb.org
http://www.osvdb.org/26881
www.securityfocus.com
http://www.securityfocus.com/bid/18701
www.vupen.com
http://www.vupen.com/english/advisories/2006/2583
More from Wireless Control System
–
CVE-2012-5990
Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote…
–
CVE-2007-5382
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts…
–
CVE-2007-2032
Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary…
–
CVE-2007-2035
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain…
–
CVE-2007-2034
Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of the SuperUsers group, and manage the…