Title: Cisco WLSE/HSE Devices Default Username and Password Vulnerability
Severity: CRITICAL
Description:
Cisco Wireless LAN Solution Engine (WLSE) devices provide centralized management including monitoring, network security, and optimization for the Cisco Wireless LAN infrastructure. Cisco Hosting Solution Engine (HSE) is hardware device used to monitor and activate various e-business services in Cisco powered data centers. HSE provides fault and performance data for hosting infrastructure and hosted services.
A hardcoded default username and password vulnerability has been identified in the WLSE and HSE devices by Cisco. It has been reported that an attacker can gain complete control over a device, if logged in with the default authentication credentials. The attacker is reportedly able to modify user information and device configuration due to this issue.
Successful exploitation could allow an attacker to gain access to sensitive data, compromise network integrity and confidentiality, cause denial of service attacks and use the devices to launch various attacks against networks.
Affected Products:
- Cisco Hosting Solution Engine 1105 1.7.0
- Cisco Hosting Solution Engine 1105 1.7.1
- Cisco Hosting Solution Engine 1105 1.7.2
- Cisco Hosting Solution Engine 1105 1.7.3
- Cisco Wireless Lan Solution Engine 1105 2.0.0
- Cisco Wireless Lan Solution Engine 1105 2.0.2
- Cisco Wireless Lan Solution Engine 1105 2.5.0
- Cisco Wireless Lan Solution Engine 1130 2.0.0
- Cisco Wireless Lan Solution Engine 1130 2.0.0 .2
- Cisco Wireless Lan Solution Engine 1130 2.0.5
References:
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
