PT-2007-3381 · Cisco · Cisco Wireless Lan Controller+1

Published 2007-04-12 · Updated 2017-07-29 · CVE-2007-2038

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions prior to 3.2.193.5 Cisco Wireless LAN Controller versions 4.0.x prior to 4.0.206.0 Cisco Wireless LAN Controller versions 4.1.x

Description The issue allows remote attackers on a local wireless network to cause a denial of service via crafted SNAP packets, malformed 802.11 traffic, or packets with certain header length values. The vulnerability could result in a denial of service condition, information disclosure, or access control list changes, or allow an attacker to gain full administrative access.

Recommendations For versions prior to 3.2.193.5, update to version 3.2.193.5 or later. For versions 4.0.x prior to 4.0.206.0, update to version 4.0.206.0 or later. For versions 4.1.x, update to a fixed version, as the specific fixed version is not specified. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2038

Affected Products

Cisco Wireless Lan Controller

Cisco Wls

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2038 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2038 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Vendor Advisory
• http://securitytracker.com/id?1017908 · Note
• http://vupen.com/english/advisories/2007/1368 · Note
• http://securityfocus.com/bid/23461 · Note
• http://osvdb.org/34136 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33609 · Note