VulnerabilityModified

CVE-2010-2977

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.

HIGH 10.0EPSS 1.28%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.28% probability · 68th percentile
CISA KEV: Not listed
Weakness: CWE-16
Affected: cisco/unified wireless network solution software
Source: cve@mitre.org

References

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7.0.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.