Cisco fixes wireless security holes

Cisco has patched a number of security flaws in the software used to manage its wireless networking products.

The company has issued two sets of patches. One fixes flaws in the Wireless Control System software used to manage Cisco's Aironet Lightweight Access Points, Wireless LAN Controllers and Wireless Location Appliance. A second set of patches fixes bugs in the Wireless LAN Controller, which controls Aironet access points, as well as flaws in the access points themselves, Cisco said.

The Wireless Control System patch fixes "multiple vulnerabilities that can result in information disclosure, privilege escalation, and unauthorised access", the company said in a security advisory notice.

In a second advisory, Cisco said it had also patched flaws that affect the Wireless LAN Controller, the Catalyst series switches, and 1000-series and 1500-series models of the Aironet access points.

These flaws could be exploited to disrupt networking services, gain access to information, or even take control of an access point, Cisco said.