CVE-2010-2978: Critical severity cisco unified wireless network solution vulnerability
Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2978?
CVE-2010-2978 is classified as a high severity vulnerability due to its potential to allow unauthorized remote access.
How do I fix CVE-2010-2978?
To fix CVE-2010-2978, upgrade to Cisco Unified Wireless Network Solution version 7.0.98.0 or later.
What systems are affected by CVE-2010-2978?
CVE-2010-2978 affects Cisco Unified Wireless Network Solution versions before 7.0.98.0.
Can CVE-2010-2978 be exploited without authentication?
Yes, CVE-2010-2978 can be exploited by remote attackers without requiring authentication.
What is the primary issue caused by CVE-2010-2978?
The primary issue with CVE-2010-2978 is the use of an inadequate message-digest algorithm for self-signed certificates, allowing for collision attacks.