Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Cisco Unified Wireless Network permits remote SNMP access

CVE-2010-2976 · published 16 years ago
Summary

The Cisco Unified Wireless Network controller (versions 7.x up to 7.0.98.0) ships with default SNMP community strings and usernames that are well known. Because these defaults are not changed, an attacker on the network can query or change the controller’s settings. Change all SNMP community names, usernames, and passwords to unique values and restrict SNMP access to trusted hosts.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco unified_wireless_network_solution_software 7.0
7.0.98.0
cpe:2.3:o:cisco:unified_wireless_network_solution_software:7.0:*:*:*:*:*:*:*
Original advisory text
The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a ...
The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for the (3) SNMP v3 username, (4) SNMP v3 authentication password, and (5) SNMP v3 privacy password, which makes it easier for remote attackers to obtain access.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
Timeline
Published10 Aug 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-2976 · NVD
Track software like this
Free during beta