cve/2006/CVE-2006-3285.md
2024-07-25 21:25:12 +00:00

18 lines
760 B
Markdown

### [CVE-2006-3285](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3285)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).
### POC
#### Reference
- http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml
#### Github
No PoCs found on GitHub currently.