PT-2007-5224 · Airespace+1 · Airespace 4000+5

Publicado

2007-07-24

·

Atualizado

2018-10-30

·

CVE-2007-4011

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software versions prior to 3.2 20070727 Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software versions 4.0 before 20070727 Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software versions 4.1 before 4.1.180.0
Description: The issue allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request. This can occur when the destination MAC address is unknown to the Layer-2 infrastructure or during Layer-3 roaming across IP subnets. The vulnerability is related to the handling of Address Resolution Protocol (ARP) packets.
Recommendations: For versions prior to 3.2 20070727, update to version 3.2 20070727 or later. For versions 4.0 before 20070727, update to version 4.0 20070727 or later. For versions 4.1 before 4.1.180.0, update to version 4.1.180.0 or later. As a temporary workaround, consider implementing workarounds available to mitigate the effects of these vulnerabilities.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-4011

Produtos afetados

Airespace 4000
Catalyst 3750
Catalyst 6500
Cisco 4100
Cisco 4400
Cisco Wls