PT-2007-3381 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2007-04-12 · Atualizado 2017-07-29 · CVE-2007-2038

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions prior to 3.2.193.5 Cisco Wireless LAN Controller versions 4.0.x prior to 4.0.206.0 Cisco Wireless LAN Controller versions 4.1.x

Description The issue allows remote attackers on a local wireless network to cause a denial of service via crafted SNAP packets, malformed 802.11 traffic, or packets with certain header length values. The vulnerability could result in a denial of service condition, information disclosure, or access control list changes, or allow an attacker to gain full administrative access.

Recommendations For versions prior to 3.2.193.5, update to version 3.2.193.5 or later. For versions 4.0.x prior to 4.0.206.0, update to version 4.0.206.0 or later. For versions 4.1.x, update to a fixed version, as the specific fixed version is not specified. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2038

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2038 · Nota de Segurança
• http://securitytracker.com/id?1017908 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2038 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1368 · Nota
• http://securityfocus.com/bid/23461 · Nota
• http://osvdb.org/34136 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33609 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Aviso do Fabricante