| Vulnerability Name: | CVE-2005-3482 (CCN-22927) | ||||||||
| Assigned: | 2005-11-02 | ||||||||
| Published: | 2005-11-02 | ||||||||
| Updated: | 2011-03-08 | ||||||||
| Summary: | Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host. | ||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: MITRE Type: CNA CVE-2005-3482 Source: CCN Type: SA17406 Cisco Wireless LAN Controllers Encryption Bypass Vulnerability Source: SECUNIA Type: UNKNOWN 17406 Source: SREASON Type: UNKNOWN 139 Source: CCN Type: SECTRACK ID: 1015140 Cisco Airespace Wireless LAN Controller May Allow Use of Unencrypted Connections Source: SECTRACK Type: UNKNOWN 1015140 Source: CCN Type: Cisco Wireless Web site Wireless - Products & Services - Cisco Systems Source: CCN Type: Cisco Aironet 1200 Access Point Web site Cisco Aironet 1200 Series - Products & Services - Cisco Systems Source: CCN Type: Cisco Security Advisory: 68034 Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Source: CCN Type: Cisco 1240 Access Point Web site Cisco Aironet 1240 AG Series - Products & Services - Cisco Systems Source: CISCO Type: Patch, Vendor Advisory 20051102 Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Source: OSVDB Type: UNKNOWN 20454 Source: CCN Type: OSVDB ID: 20454 Cisco Wireless LWAPP Mode MAC Spoofing Encryption Bypass Source: BID Type: UNKNOWN 15272 Source: CCN Type: BID-15272 Cisco Airespace WLAN Controller Unauthorized Network Access Vulnerability Source: VUPEN Type: UNKNOWN ADV-2005-2278 Source: XF Type: UNKNOWN cisco-airespace-bypass-security(22927) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||