The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Omniaccess_wireless | Alcatel-lucent | 43xx (including) | 43xx (including) |
| Omniaccess_wireless | Alcatel-lucent | 6000 (including) | 6000 (including) |
| Mobility_controller | Aruba | 200 (including) | 200 (including) |
| Mobility_controller | Aruba | 800 (including) | 800 (including) |
| Mobility_controller | Aruba | 2400 (including) | 2400 (including) |
| Mobility_controller | Aruba | 6000 (including) | 6000 (including) |