CVE-2006-3291

The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only (Individual Passwords)" setting, which removes all security and password configurations and allows remote attackers to access the system.

Score
CVSS 2.0 9.3 Critical
Status
Modified - cve@mitre.org
Published
2006-06-28
Last modified
2024-08-07
Weaknesses
CWE-16

Affected products

References