CVE-2004-0391

critical Cisco
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.8%
Exploitation probability in 30 days
Top 26% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: June 1, 2004 (8017 days ago)
Last Modified: April 16, 2026
Vendor: Cisco
Source: NVD

Description

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.

CWE

NVD-CWE-Other

Affected Products

cisco wireless lan solution enginecisco hosting solution engine

References

🔗 www.ciac.org 🔗 www.cisco.com 🔗 www.kb.cert.org 🔗 www.securityfocus.com 🔗 exchange.xforce.ibmcloud.com