Information disclosure in Cisco Unified_wireless_network_solution_software

CVE-2010-2975

Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544.

Vulnerability class: Information Disclosure

EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_wireless_network_solution_software — versions 7.0, 7.0.98.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM)