Sign-up

ID

VAR-201008-0358


CVE

CVE-2010-2987


TITLE

Cisco WCS Solution Vulnerable to cross-site scripting

Trust: 0.8

sources: JVNDB: JVNDB-2010-004255

DESCRIPTION

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtg33854. Wireless Control System Software is prone to a cross-site scripting vulnerability. Remote attackers can inject arbitrary web scripts or HTML with unknown vectors. ---------------------------------------------------------------------- Get tweets from Secunia http://twitter.com/secunia ---------------------------------------------------------------------- TITLE: Cisco Wireless Control System Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA40827 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/40827/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=40827 RELEASE DATE: 2010-08-06 DISCUSS ADVISORY: http://secunia.com/advisories/40827/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/40827/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=40827 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Some vulnerabilities have been reported in Cisco Wireless Control System, which can be exploited by malicious people to conduct cross-site scripting attacks. 1) Input passed via the "searchText" parameter to webacs/QuickSearchAction.do is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. 2) Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. 3) Certain input passed to searchClientAction.do and switchGeneralAction.do is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. SOLUTION: Update to version 6.0.196.0 or later. PROVIDED AND/OR DISCOVERED BY: 1) Tom Neaves 2, 3) Reported by the vendor. ORIGINAL ADVISORY: Cisco: http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html Tom Neaves: http://www.tomneaves.com/Cisco_Wireless_Control_System_XSS.txt OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2010-2987 // JVNDB: JVNDB-2010-004255 // BID: 73607 // VULHUB: VHN-45592 // PACKETSTORM: 92515

AFFECTED PRODUCTS

vendor:ciscomodel:wireless control system softwarescope:eqversion:7.0

Trust: 1.9

vendor:ciscomodel:wireless control system softwarescope:eqversion:7.0.164

Trust: 0.8

vendor:ciscomodel:wireless control system softwarescope:ltversion:7.x

Trust: 0.8

vendor:ciscomodel:unified wireless network solutionscope:eqversion:7.0.98.0

Trust: 0.8

vendor:ciscomodel:unified wireless network solutionscope:ltversion:7.x

Trust: 0.8

sources: BID: 73607 // JVNDB: JVNDB-2010-004255 // CNNVD: CNNVD-201008-088 // NVD: CVE-2010-2987

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-2987
value: MEDIUM

Trust: 1.0

NVD: CVE-2010-2987
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201008-088
value: MEDIUM

Trust: 0.6

VULHUB: VHN-45592
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-2987
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-45592
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-45592 // JVNDB: JVNDB-2010-004255 // CNNVD: CNNVD-201008-088 // NVD: CVE-2010-2987

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 1.9

sources: VULHUB: VHN-45592 // JVNDB: JVNDB-2010-004255 // NVD: CVE-2010-2987

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201008-088

TYPE

xss

Trust: 0.7

sources: PACKETSTORM: 92515 // CNNVD: CNNVD-201008-088

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-004255

PATCH
title:Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 7.0.98.0url:http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-004255

EXTERNAL IDS
db:NVDid:CVE-2010-2987
Trust: 2.8
db:SECUNIAid:40827
Trust: 1.8
db:JVNDBid:JVNDB-2010-004255
Trust: 0.8
db:CNNVDid:CNNVD-201008-088
Trust: 0.7
db:BIDid:73607
Trust: 0.4
db:VULHUBid:VHN-45592
Trust: 0.1
db:PACKETSTORMid:92515
Trust: 0.1
sources:
            
            
            VULHUB: VHN-45592 // 
            
            
            
            BID: 73607 // 
            
            
            
            JVNDB: JVNDB-2010-004255 // 
            
            
            
            PACKETSTORM: 92515 // 
            
            
            
            CNNVD: CNNVD-201008-088 // 
            
            
            
            NVD: CVE-2010-2987

REFERENCES
url:http://www.cisco.com/en/us/docs/wireless/controller/release/notes/crn7.0.html
Trust: 2.1
url:http://secunia.com/advisories/40827
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-2987
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-2987
Trust: 0.8
url:http://twitter.com/secunia
Trust: 0.1
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/40827/#comments
Trust: 0.1
url:http://www.tomneaves.com/cisco_wireless_control_system_xss.txt
Trust: 0.1
url:http://secunia.com/advisories/40827/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=40827
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-45592 // 
            
            
            
            BID: 73607 // 
            
            
            
            JVNDB: JVNDB-2010-004255 // 
            
            
            
            PACKETSTORM: 92515 // 
            
            
            
            CNNVD: CNNVD-201008-088 // 
            
            
            
            NVD: CVE-2010-2987

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 73607

SOURCES
db:VULHUBid:VHN-45592
db:BIDid:73607
db:JVNDBid:JVNDB-2010-004255
db:PACKETSTORMid:92515
db:CNNVDid:CNNVD-201008-088
db:NVDid:CVE-2010-2987

LAST UPDATE DATE
2025-04-11T23:10:53.042000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-45592date:2010-08-10T00:00:00
db:BIDid:73607date:2010-08-10T00:00:00
db:JVNDBid:JVNDB-2010-004255date:2012-06-26T00:00:00
db:CNNVDid:CNNVD-201008-088date:2010-08-13T00:00:00
db:NVDid:CVE-2010-2987date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-45592date:2010-08-10T00:00:00
db:BIDid:73607date:2010-08-10T00:00:00
db:JVNDBid:JVNDB-2010-004255date:2012-06-26T00:00:00
db:PACKETSTORMid:92515date:2010-08-06T11:28:26
db:CNNVDid:CNNVD-201008-088date:2010-08-13T00:00:00
db:NVDid:CVE-2010-2987date:2010-08-10T12:23:06.303