CVE-2007-2035
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web...
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
Exploit likelihood
What each source reports
NVD Score used
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
- Record
CVE-2007-2035- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
- Record
CVE-2007-2035- Updated
- 2026-11-02
EUVDEUVD-2007-2030 No score
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
- Record
EUVD-2007-2030- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fmrr-39jx-v9r4 No score
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web...
Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain network organization data via a direct request for files in certain directories, aka Bug ID CSCsg04301.
- Record
GHSA-fmrr-39jx-v9r4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2035 is a high vulnerability (CVSS 7.8) in Cisco Wireless Control System, published April 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.
References
cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml
vupen.com/english/advisories/2007/1367
securitytracker.com/id?1017907
securityfocus.com/bid/23460
secunia.com/advisories/24865
osvdb.org/34131
exchange.xforce.ibmcloud.com/vulnerabilities/33606
nvd.nist.gov/vuln/detail/CVE-2007-2035
github.com/advisories/GHSA-fmrr-39jx-v9r4