Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-2035

EPSS 0.57% · P69
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-2035

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco无线控制系统向未经认证用户泄露信息安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco无线控制系统(WCS)可提供无线LAN规划设计、系统配置、位置追踪、安全监控和无线LAN管理工具。 向未经认证用户泄露信息 +---------------------------------------------- 在受影响版本的WCS上，WCS页面多级结构中的一些目录没有受到口令保护，可能被 未经认证的用户访问。尽管可获得的信息不允许攻击者访问WCS，但仍可泄露有关 网络组织的信息，包括接入点位置。这个漏洞在Cisco Bug ID中记录为CSCsg04301。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-2035

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-2035

请登录查看更多情报信息。

Same Patch Batch · n/a · 2007-04-16 · 26 CVEs total

CVE-2007-1745Clam AntiVirus ClamAV 缓冲区溢出漏洞
CVE-2007-2030LHA 'lharc.c' 权限许可和访问控制漏洞
CVE-2007-2041Cisco无线Lan控制器重启后WLAN ACL失效漏洞
CVE-2007-2040Cisco无线Lan控制器轻型AP中硬编码的服务口令安全漏洞
CVE-2007-2039Cisco无线Lan控制器NPU锁定漏洞
CVE-2007-2038Cisco无线Lan控制器NPU锁定漏洞
CVE-2007-2037Cisco无线Lan控制器多个安全漏洞
CVE-2007-2036Cisco无线Lan控制器默认SNMP团体字符串漏洞
CVE-2007-2034Cisco无线控制系统组帐号权限提升安全漏洞
CVE-2007-2033Cisco无线控制系统权限提升漏洞
CVE-2007-2032Cisco无线控制系统WCS位置备份固定的FTP凭据安全漏洞
CVE-2007-20313proxy HTTP代理请求缓冲区溢出漏洞
CVE-2007-1997Clam AntiVirus ClamAV sizeof()权限提升漏洞
CVE-2007-1558APOP协议不安全MD5无用信息缺陷设计错误漏洞
CVE-2007-2052Python PyLocale_strxfrm函数远程信息泄露漏洞
CVE-2007-2051bftpd parsecmd函数缓冲区溢出漏洞
CVE-2007-2050RicarGBooK 'Header.PHP' 多个目录遍历漏洞
CVE-2007-2049Mambo 日历模块绝对路径多个远程文件包含漏洞
CVE-2007-2048webMethods Glue 'Console'目录遍历漏洞
CVE-2007-2047Openads 'ck.php' CRLF注入漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-2035

No comments yet

Leave a comment