PT-2007-3382 · Cisco · Cisco Wireless Lan Controller+1

Publicado 2007-04-12 · Atualizado 2018-11-01 · CVE-2007-2039

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions prior to 3.2.171.5 Cisco Wireless LAN Controller versions 4.0.x prior to 4.0.206.0 Cisco Wireless LAN Controller versions 4.1.x

Description The issue allows remote attackers on a local wireless network to cause a denial of service via crafted SNAP packets, malformed 802.11 traffic, or packets with certain header length values. The vulnerability could result in a denial of service condition, information disclosure, or access control list changes, or allow an attacker to gain full administrative access.

Recommendations For versions prior to 3.2.171.5, update to version 3.2.171.5 or later. For versions 4.0.x prior to 4.0.206.0, update to version 4.0.206.0 or later. For versions 4.1.x, update to a fixed version, as the specific fixed version is not specified in the provided data. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-2039

Produtos afetados

Cisco Wireless Lan Controller

Cisco Wls

Referências · 10

• http://securitytracker.com/id?1017908 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2039 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2007-2039 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1368 · Nota
• http://osvdb.org/34139 · Nota
• http://securityfocus.com/bid/23461 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33609 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Aviso do Fabricante
• http://osvdb.org/34137 · Nota