CVE-2006-3290

CVE Database · CVE-2006-3290

CVE-2006-3290

· N/AModified

CVSS v3.1

N/A

EPSS

2.31%

Published

Jun 28, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.

Affected Products (1)

cisco · wireless_control_systemvulnerable

References (14)

http://secunia.com/advisories/20870

http://securitytracker.com/id?1016398

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Patch

http://www.osvdb.org/26879

http://www.securityfocus.com/bid/18701

http://www.vupen.com/english/advisories/2006/2583

https://exchange.xforce.ibmcloud.com/vulnerabilities/27442

http://secunia.com/advisories/20870

http://securitytracker.com/id?1016398

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Patch

http://www.osvdb.org/26879

KEV Catalog EPSS Scores Vendors All CVEs