PT-2007-3380 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2007-04-12 · Atualizado 2018-11-01 · CVE-2007-2037

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions 3.2.116.21 and earlier, and 4.0.x versions prior to 4.0.155.0

Description The issue allows remote attackers on a local network to cause a denial of service (device crash) via malformed Ethernet traffic. It could also result in information disclosure, access control list changes, or allow an attacker to gain full administrative access.

Recommendations For versions 3.2.116.21 and earlier, update to version 3.2.116.21 or later to resolve the issue. For 4.0.x versions prior to 4.0.155.0, update to version 4.0.155.0 or later to resolve the issue. As a temporary workaround, consider implementing available workarounds to mitigate the effects of these vulnerabilities until a patch is applied.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-2037

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 9

• http://securitytracker.com/id?1017908 · Aviso do Fabricante
• http://osvdb.org/34135 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2037 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1368 · Nota
• http://securityfocus.com/bid/23461 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33607 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2037 · Nota de Segurança