CVE:CVE-2009-0062
CNNVD:CNNVD-200902-101
Cisco无线LAN控制器(WLC)使用轻量级接入点协议(LWAPP)管理Cisco Aironet接入点。
Cisco WLC， Cisco Catalyst 6500 WiSM和Cisco Catalyst 3750 Integrated WLC中存在多个安全漏洞，允许恶意用户导致拒绝服务或绕过某些安全限制。WLC 4.2.173.0软件版本存在权限提升漏洞，允许受限制的用户(如Lobby Admin)在受影响系统上获得完全的管理权限。
solution:Upgrade cisco catalyst_3750_series_integrated_wireless_lan_controller to a higher version than 4.2,4.2.173.0,and avoid the version 4.2,4.2.173.0; Upgrade cisco catalyst_6500_wireless_services_modules to a higher version than 4.2,4.2.173.0,and avoid the version 4.2,4.2.173.0; Upgrade cisco wireless_lan_controller_software to a higher version than 4.2,4.2.173.0,and avoid the version 4.2,4.2.173.0