Access Control Bypass in Cisco Unified Wireless Network Solution

CVE-2010-2984

Summary

The Cisco Unified Wireless Network Solution prior to version 7.0.98.0 on 4404 series controllers contains a vulnerability that stems from improper implementation of the WEBAUTH_REQD state. This flaw permits remote attackers to bypass established access restrictions via WLAN traffic, potentially leading to unauthorized access to network resources. Users of affected versions should promptly apply available updates to safeguard their wireless environments.

References