Cisco Systems Inc. has fixed a variety of security holes in its wireless programs that online outlaws could exploit to bypass security features, access sensitive data, launch cross-site scripting attacks and do other damage.

The first problem affects the Cisco Wireless Control System (WCS), a platform designed to help enterprises design, control and monitor Cisco wireless LANs. According to the San Jose, Calif.-based networking giant, remote attackers could exploit the flaws to:

Access sensitive configuration information about access points managed by WCS;

Read from and write to arbitrary files on a WCS system;

Log in to a WCS system with a default administrator password;

Execute script code in a WCS user's web browser; and

Access directories that may reveal sensitive WCS configuration information.

Danish vulnerability clearinghouse Secunia provided the following description of the flaws in its advisory:

read more