Every CVE Search/ Get API key

CVE-2010-2978

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate...

10.0 High

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

Exploit likelihood

1.80%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

Record
CVE-2010-2978
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

Record
CVE-2010-2978
Updated
2026-11-02
EUVDEUVD-2010-2980 No score

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

Record
EUVD-2010-2980
Updated
2026-11-03
GitHub AdvisoriesGHSA-jhcr-xv7f-62wj No score

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate...

Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

Record
GHSA-jhcr-xv7f-62wj
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2978 is a high vulnerability (CVSS 10.0) in Cisco Unified Wireless Network Solution Software, published August 9, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open