Details of VAR-200207-0089

ID

VAR-200207-0089

CVE

CVE-2002-0545

TITLE

Cisco Aironet Telnet Verify that there is a denial of service vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200207-003

DESCRIPTION

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords. The Cisco Aironet product family provides wireless LAN (WLAN) support for a wide range of applications. A vulnerability has been reported in some Aironet products. If telnet access to the device is enabled, an attacker is able to cause the device to reboot. Authentication is not required, although it must be supported. This vulnerability cannot be triggered through the WEB interface

Trust: 1.26

sources: NVD: CVE-2002-0545 // BID: 4461 // VULHUB: VHN-4937

AFFECTED PRODUCTS

vendor:	cisco	model:	aironet ap350	scope:	eq	version:	11.21	Trust: 1.6
vendor:	cisco	model:	aironet ap340	scope:	lte	version:	11.21	Trust: 1.0
vendor:	cisco	model:	aironet ap350	scope:	lte	version:	11.21	Trust: 1.0
vendor:	cisco	model:	aironet ap340	scope:	eq	version:	11.21	Trust: 0.6
vendor:	cisco	model:	br350	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ap350	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ap340	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	br340	scope:	ne	version:	-	Trust: 0.3
vendor:	cisco	model:	aironet	scope:	ne	version:	4800	Trust: 0.3
vendor:	cisco	model:	aironet	scope:	ne	version:	4500	Trust: 0.3
vendor:	cisco	model:	aironet	scope:	ne	version:	3500	Trust: 0.3
vendor:	cisco	model:	aironet	scope:	ne	version:	3100	Trust: 0.3

sources: BID: 4461 // CNNVD: CNNVD-200207-003 // NVD: CVE-2002-0545

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2002-0545
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-200207-003
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-4937
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2002-0545
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-4937
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-4937 // CNNVD: CNNVD-200207-003 // NVD: CVE-2002-0545

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2002-0545

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200207-003

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200207-003

EXTERNAL IDS

db:	BID	id:	4461	Trust: 2.0
db:	NVD	id:	CVE-2002-0545	Trust: 1.7
db:	CNNVD	id:	CNNVD-200207-003	Trust: 0.7
db:	CISCO	id:	20020409 AIRONET TELNET VULNERABILITY	Trust: 0.6
db:	XF	id:	8788	Trust: 0.6
db:	VULHUB	id:	VHN-4937	Trust: 0.1

sources: VULHUB: VHN-4937 // BID: 4461 // CNNVD: CNNVD-200207-003 // NVD: CVE-2002-0545

REFERENCES

url:	http://www.securityfocus.com/bid/4461	Trust: 2.7
url:	http://www.cisco.com/warp/public/707/aironet-telnet.shtml	Trust: 2.7
url:	http://www.iss.net/security_center/static/8788.php	Trust: 2.7

sources: VULHUB: VHN-4937 // CNNVD: CNNVD-200207-003 // NVD: CVE-2002-0545

CREDITS

Cisco Systems Product Security Incident Response Team※ psirt@cisco.com

Trust: 0.6

sources: CNNVD: CNNVD-200207-003

SOURCES

db:	VULHUB	id:	VHN-4937
db:	BID	id:	4461
db:	CNNVD	id:	CNNVD-200207-003
db:	NVD	id:	CVE-2002-0545

LAST UPDATE DATE

2024-11-22T23:10:07.555000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-4937	date:	2008-09-05T00:00:00
db:	BID	id:	4461	date:	2002-04-09T00:00:00
db:	CNNVD	id:	CNNVD-200207-003	date:	2005-05-02T00:00:00
db:	NVD	id:	CVE-2002-0545	date:	2024-11-20T23:39:20.167

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-4937	date:	2002-07-03T00:00:00
db:	BID	id:	4461	date:	2002-04-09T00:00:00
db:	CNNVD	id:	CNNVD-200207-003	date:	2002-04-09T00:00:00
db:	NVD	id:	CVE-2002-0545	date:	2002-07-03T04:00:00