SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2010-3034

Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a…

MEDIUM 5.0EPSS 1.10%

Does this matter?

Lower severity and a low EPSS score (1.10%). Track it; it rarely justifies an emergency change on its own.

Description

Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x or possibly 4.1 through 6.0.x, allows remote attackers to bypass ACLs in the controller CPU, and consequently send network traffic to unintended segments or devices, via unspecified vectors, a different vulnerability than CVE-2010-0575.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
1.10% probability · 64th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
cisco/wireless lan controller software
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.