Details of VAR-201008-0351

ID

VAR-201008-0351

CVE

CVE-2010-2980

TITLE

Cisco UWN Solution Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2010-004249

DESCRIPTION

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic, aka Bug ID CSCtd26794. Exploiting these issues can allow an attacker to deny service to legitimate users, bypass security restrictions, gain unauthorized access, or execute arbitrary code. Other attacks may also be possible. Versions prior to Cisco Unified Wireless Network (UWN) 7.0.98.0 are vulnerable

Trust: 1.98

sources: NVD: CVE-2010-2980 // JVNDB: JVNDB-2010-004249 // BID: 42387 // VULHUB: VHN-45585

AFFECTED PRODUCTS

vendor:	cisco	model:	unified wireless network solution software	scope:	eq	version:	7.0	Trust: 1.6
vendor:	cisco	model:	unified wireless network solution software	scope:	eq	version:	7.0.98.0	Trust: 1.6
vendor:	cisco	model:	5508 wireless controller	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	unified wireless network solution	scope:	eq	version:	7.x to 7.0.98.0	Trust: 0.8

sources: JVNDB: JVNDB-2010-004249 // CNNVD: CNNVD-201008-076 // NVD: CVE-2010-2980

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2010-2980
value:	HIGH
Trust: 1.0
NVD:	CVE-2010-2980
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201008-076
value:	HIGH
Trust: 0.6
VULHUB:	VHN-45585
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2010-2980
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-45585
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-45585 // JVNDB: JVNDB-2010-004249 // CNNVD: CNNVD-201008-076 // NVD: CVE-2010-2980

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-45585 // JVNDB: JVNDB-2010-004249 // NVD: CVE-2010-2980

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201008-076

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201008-076

CONFIGURATIONS

sources: JVNDB: JVNDB-2010-004249

PATCH

title:

Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 7.0.98.0

url:

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html

Trust: 0.8

sources: JVNDB: JVNDB-2010-004249

EXTERNAL IDS

db:	NVD	id:	CVE-2010-2980	Trust: 2.8
db:	JVNDB	id:	JVNDB-2010-004249	Trust: 0.8
db:	CNNVD	id:	CNNVD-201008-076	Trust: 0.7
db:	BID	id:	42387	Trust: 0.3
db:	VULHUB	id:	VHN-45585	Trust: 0.1

sources: VULHUB: VHN-45585 // BID: 42387 // JVNDB: JVNDB-2010-004249 // CNNVD: CNNVD-201008-076 // NVD: CVE-2010-2980

REFERENCES

url:	http://www.cisco.com/en/us/docs/wireless/controller/release/notes/crn7.0.html	Trust: 2.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2980	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-2980	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-45585 // BID: 42387 // JVNDB: JVNDB-2010-004249 // CNNVD: CNNVD-201008-076 // NVD: CVE-2010-2980

CREDITS

Cisco

Trust: 0.3

sources: BID: 42387

SOURCES

db:	VULHUB	id:	VHN-45585
db:	BID	id:	42387
db:	JVNDB	id:	JVNDB-2010-004249
db:	CNNVD	id:	CNNVD-201008-076
db:	NVD	id:	CVE-2010-2980

LAST UPDATE DATE

2025-04-11T22:54:11.817000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-45585	date:	2010-08-10T00:00:00
db:	BID	id:	42387	date:	2010-06-24T00:00:00
db:	JVNDB	id:	JVNDB-2010-004249	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-201008-076	date:	2010-08-12T00:00:00
db:	NVD	id:	CVE-2010-2980	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-45585	date:	2010-08-10T00:00:00
db:	BID	id:	42387	date:	2010-06-24T00:00:00
db:	JVNDB	id:	JVNDB-2010-004249	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-201008-076	date:	2010-08-12T00:00:00
db:	NVD	id:	CVE-2010-2980	date:	2010-08-10T12:19:09.957