Cisco Systems has fixed a total of 11 vulnerabilities in its Wireless LAN Controller (WLC) and Wireless Control System (WCS), the most critical of which attackers could use to access an affected system with administrative privileges.
In a Thursday advisory, the San Jose, Calif.-based vendor said it has patched seven holes in its Wireless LAN Controller, which is used to manage Cisco Aironet access points. In addition to launching denial of service attacks and altering access control lists, a successful attacker could exploit the flaws to gain full control over an affected system.
Cisco assigned CVSS base scores ranging from 3.3 to 10 to the seven vulnerabilities, which affect versions 4.0, 3.2, and previous versions of the Wireless LAN Controller software.
Cisco patched an additional four vulnerabilities in its Wireless Control System, a platform for wireless LAN planning and design, system configuration, location tracking, security monitoring, and wireless LAN management.
The flaws, to which Cisco assigned CVSS base scores ranging from 2.3 to 10, could lead to information disclosure, privilege escalation, and unauthorized access to the system due to fixed authentication credentials, Cisco said in a separate advisory.
Versions of WCS prior to 4.0.96.0 are affected by one or more of these vulnerabilities, Cisco said.
Symantec, in a Deepsight Threat Management System bulletin issued Thursday, assigned severity ratings of 10 out of 10 to both sets of vulnerabilities.
|
Symantec's Code Red: The Law Enforcement/Anonymous E-Mail Exchange Law enforcement officials negotiated via e-mail for more than two weeks with an Anonymous group member trying to extort $50,000 from Symantec to keep stolen product code off the Internet. |
|
How To Sell IT Security Services To Your Customers Cyberattacks can cost a business thousands, even millions, of dollars, and can deal a death blow to some. Here's how IT solution providers can help guard against malicious attacks. |
|
Cybersecurity Experts: What They Know Could Scare You A recent report based on interviews with security experts in government, business and academia finds more than half in agreement that a worldwide arms race is taking place in cyberspace. |
 More
Slide Shows |
- Insider Threats: The Next Frontier for Security Resellers and SMBs
- Complete Security and Your Bottom Line: Sophos, Value and the Channel
- Tough Threats, Tougher Security: How You Can Leverage New Solutions To Combat A “Targeted Attack” Landscape
- Dark Clouds Ahead: Why the Mid-Market Needs To Ramp Up Cloud Security and How You Can Help Them Get There
