CVE-2009-2976

{"id": "CVE-2009-2976", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-08-27T17:30:00.360", "references": [{"url": "http://securitytracker.com/id?1022774", "source": "cve@mitre.org"}, {"url": "http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf", "source": "cve@mitre.org"}, {"url": "http://www.airmagnet.com/news/press_releases/2009/08252009.php", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network."}, {"lang": "es", "value": "Los dispositivos Cisco Aironet Lightweight Access Point (AP) env\u00edan el contenido de ciertos paquetes de multidifusi\u00f3n en texto plano, lo que permite a atacantes remotos descubrir las direcciones IP y MAC del Wireless LAN Controller as\u00ed como los detalles de configuraci\u00f3n del Punto de Acceso (AP) espiando la red wireless."}], "lastModified": "2009-08-28T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:aironet_ap1100:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D954F30-8AD0-41E9-8D62-BEFEBDCB3B6D"}, {"criteria": "cpe:2.3:h:cisco:aironet_ap1200:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E8B5553-7295-4786-9F81-B4527EAD4F0B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}