CVE:CVE-2010-2826
CNNVD:CNNVD-201008-179
Cisco无线控制系统(WCS) 6.0.196.0之前的6.0.x版本存在SQL注入漏洞。远程认证用户可以借助有关客户名单screen中ORDER BY子句的向量执行任意SQL命令。
solution:Upgrade cisco wireless_control_system_software to a higher version than 6.0.188.0,6.0,6.0.132.0,6.0.170.0,6.0.181.0,6.0.182.0,and avoid the version (,6.0.188.0],6.0,6.0.132.0,6.0.170.0,6.0.181.0,6.0.182.0