CVE-2010-2975

Published: Aug 10, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544.

Affected (2)

Products: Cisco: Unified Wireless Network Solution Software

Cisco

1 product

Unified Wireless Network Solution Software

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Wireless Network Solution Software	Version 7.0.98.0
Cisco Unified Wireless Network Solution Software	Version 7.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html

Source: cve@mitre.org

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.