Cisco Systems is reporting multiple vulnerabilities in three popular wireless products that can unleash all kinds of nastiness, including denials of service, privilege escalation, information disclosure and the ability to gain full administrative access.

The flaws reside in Cisco's Wireless Control System (WCS), Wireless LAN Controller and Lightweight Access Points.

Vulnerabilities in WCS include Fixed FTP Credentials for Location Backup, Account Group Privilege Escalation and Information Disclosure to Unauthenticated Users. Miscreants could exploit these flaws to write arbitrary files to the server that is hosting the WCS application, alter system files, and change an account group membership to gain full control of the WCS. Oh yeah, and all three can be exploited remotely.

The other two products suffer from five vulnerabilities, the most serious one affecting default SNMP community strings. That can also be exploited remotely and could allow an attacker to gain complete control of the device.

Cisco is advising administrators to apply fixes and workarounds. The advisories can be found here and here. ®

Related stories

Cisco patches serious holes in voice-enabled offerings (8 August 2007)
Cisco Q3 profits leap 35 per cent (9 May 2007)
Cisco wraps up against VoIP DoS bugs (29 March 2007)
Cisco Borgs NeoPath (13 March 2007)
Cisco lets slip NAC code to open source (9 February 2007)
Cisco pulls its security together (6 February 2007)
Cisco squishes bug trio (25 January 2007)