SSH Session Mismanagement in Cisco Unified Wireless Network Solution
CVE-2010-2975

Currently unrated

Key Information:

Vendor
Cisco
Status
Unified Wireless Network Solution Software
Vendor
CVE Published:
10 August 2010

Summary

The Cisco Unified Wireless Network Solution versions 7.x to 7.0.98.0 exhibit a weakness in the handling of multiple SSH sessions. This flaw can potentially allow attackers in physical proximity to intercept sensitive data, including passwords, through an exploit related to an 'arrow key failure'. As a result, appropriate measures must be taken to secure the SSH management interfaces to prevent unauthorized access.

References

http://www.cisco.com/en/US/docs/wireless/controller/relea...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.