CVE-2005-3482 - Vulnerability Details - OpenCVE

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cisco	Aironet Ap1131 Aironet Ap1200 Aironet Ap1240

Configuration 1 [-]

OR	cpe:2.3:h:cisco:aironet_ap1131::::::::
	cpe:2.3:h:cisco:aironet_ap1200::::::::
	cpe:2.3:h:cisco:aironet_ap1240::::::::

No data.

References

Link	Providers
http://secunia.com/advisories/17406
http://securityreason.com/securityalert/139
http://securitytracker.com/id?1015140
http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml
http://www.osvdb.org/20454
http://www.securityfocus.com/bid/15272
http://www.vupen.com/english/advisories/2005/2278

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-03T02:00:00

Updated: 2024-08-07T23:17:22.706Z

Reserved: 2005-11-03T00:00:00

Link: CVE-2005-3482

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-11-03T02:02:00.000

Modified: 2024-11-21T00:02:00.107

Link: CVE-2005-3482

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-02T00:00:00", "descriptions": [{"lang": "en", "value": "Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2005-11-18T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "139", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/139"}, {"name": "20454", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20454"}, {"name": "15272", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15272"}, {"name": "17406", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17406"}, {"name": "1015140", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015140"}, {"name": "20051102 Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml"}, {"name": "ADV-2005-2278", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2278"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3482", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "139", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/139"}, {"name": "20454", "refsource": "OSVDB", "url": "http://www.osvdb.org/20454"}, {"name": "15272", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15272"}, {"name": "17406", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17406"}, {"name": "1015140", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015140"}, {"name": "20051102 Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access", "refsource": "CISCO", "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml"}, {"name": "ADV-2005-2278", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2278"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:22.706Z"}, "title": "CVE Program Container", "references": [{"name": "139", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/139"}, {"name": "20454", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20454"}, {"name": "15272", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15272"}, {"name": "17406", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17406"}, {"name": "1015140", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015140"}, {"name": "20051102 Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml"}, {"name": "ADV-2005-2278", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2278"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3482", "datePublished": "2005-11-03T02:00:00", "dateReserved": "2005-11-03T00:00:00", "dateUpdated": "2024-08-07T23:17:22.706Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:aironet_ap1131:*:*:*:*:*:*:*:*", "matchCriteriaId": "DA740581-ED86-4822-9516-BCCA4C267561", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E8B5553-7295-4786-9F81-B4527EAD4F0B", "vulnerable": true}, {"criteria": "cpe:2.3:h:cisco:aironet_ap1240:*:*:*:*:*:*:*:*", "matchCriteriaId": "6AAA8DE4-4E1D-4286-846D-0381BF68632F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC address of an authenticated end host."}], "id": "CVE-2005-3482", "lastModified": "2024-11-21T00:02:00.107", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-03T02:02:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17406"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/139"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015140"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20454"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15272"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2278"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17406"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/139"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015140"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20454"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15272"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2278"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}