CVE-2010-2826

SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091e.shtml	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:wireless_control_system_software::::::::
	cpe:2.3:a:cisco:wireless_control_system_software:6.0:::::::*
	cpe:2.3:a:cisco:wireless_control_system_software:6.0.132.0:::::::*
	cpe:2.3:a:cisco:wireless_control_system_software:6.0.170.0:::::::*
	cpe:2.3:a:cisco:wireless_control_system_software:6.0.181.0:::::::*
	cpe:2.3:a:cisco:wireless_control_system_software:6.0.182.0:::::::*

History

No history.

Information

Published : 2010-08-17 05:41

Updated : 2011-07-26 04:00

NVD link : CVE-2010-2826

Mitre link : CVE-2010-2826

CVE.ORG link : CVE-2010-2826

JSON object : View

Products Affected

cisco

wireless_control_system_software

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2010-2826", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-08-17T05:41:21.613", "references": [{"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091e.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en \"Cisco Wireless Control System\" (WCS) versi\u00f3n v6.0.x anteriores a la v6.0.196.0 permite a usuarios autenticados remotos ejecutar comandos SQL de su elecci\u00f3n a trav\u00e9s de vectores de ataque relacionados con la expresi\u00f3n ORDER BY de las pantallas de \"Client List\" (lista de clientes), tambi\u00e9n conocido como Bug ID CSCtf37019."}], "lastModified": "2011-07-26T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F9C754F-C126-4363-A965-49205D92F300", "versionEndIncluding": "6.0.188.0"}, {"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13E52795-7C27-4E3B-ABDC-549AC9728B55"}, {"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:6.0.132.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8486474-1D58-4165-92A7-AB9079B8A9B8"}, {"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:6.0.170.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D5A7438-651D-4080-B587-EBAEBA0098F1"}, {"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:6.0.181.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E09E8ADF-0D0C-493C-B2A8-58DF6F725E45"}, {"criteria": "cpe:2.3:a:cisco:wireless_control_system_software:6.0.182.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41489DF2-0A3B-4A5D-A296-03BCE07F5220"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}