CVE-2007-2032

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-16 · updated 2026-06-16

Description

Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote attackers to read and modify arbitrary files via unspecified vectors related to "properties of the FTP server," aka Bug ID CSCse93014.

Affected products

Cisco Wireless Control System: 4.0, 4.0.95

References

http://secunia.com/advisories/24865
http://securitytracker.com/id?1017907
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
http://www.osvdb.org/34132
http://www.securityfocus.com/bid/23460
http://www.vupen.com/english/advisories/2007/1367
https://exchange.xforce.ibmcloud.com/vulnerabilities/33614
http://secunia.com/advisories/24865
http://securitytracker.com/id?1017907
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
http://www.osvdb.org/34132
http://www.securityfocus.com/bid/23460

Get alerted when CVE-2007-2032 or the next vulnerability affects your stack