Vulnerability in Cisco Access Points operating in Lightweight Access Point Protocol (LWAPP)

Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access� [Products & Services] - Cisco Systems
I think the idea of thin AP's is economically sound, but I'd rather see functionality built out rather than centralized.

Cisco Access Points operating in Lightweight Access Point Protocol (LWAPP) mode may allow unauthenticated end hosts to send unencrypted traffic to a secure network by sending frames from the Media Access Control (MAC) address of an already authenticated end host.

Only the access points that are operating in LWAPP (i.e., controlled by a separate Wireless LAN Controller) mode are affected. Access points that are running in autonomous mode are not affected.

Cisco has made free software available to address this vulnerability for affected customers.