Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Cisco Unified Wireless Network lets attackers skip Wi‑Fi login

CVE-2010-2984 · published 16 years ago
Summary

The Cisco Unified Wireless Network software on 4404 series controllers does not correctly enforce the required web authentication step for Wi‑Fi users. This flaw lets a remote attacker connect to the wireless network without being forced to go through the intended login page, potentially gaining unauthorized access. Update the controller software to version 7.0.98.0 or later to restore proper authentication enforcement.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco unified_wireless_network_solution_software 7.0
7.0.98.0
cpe:2.3:o:cisco:unified_wireless_network_solution_software:7.0:*:*:*:*:*:*:*
Original advisory text
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended acc...
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published10 Aug 2010
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2010-2984 · NVD
Track software like this
Free during beta