>> Cisco Access Point Web-browser Interface Unauthorized Administrative Access Issue
Title : Cisco Access Point Web-browser Interface Unauthorized Administrative Access Issue VUPEN ID : VUPEN/ADV-2006-2584 CVE ID : CVE-2006-3291
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-06-28
Technical Description
A vulnerability has been identified in Cisco Wireless Access Points, which could be exploited by remote attackers to compromise a vulnerable device. This flaw is due to an error in the web-browser interface when changing "Security > Admin Access" from "Default Authentication (Global Password)" to "Local User List Only (Individual Passwords)", which could cause a vulnerable access point to be re-configured with no security allowing attackers to gain unauthorized administrative access via the web management interface or via the console port.
