PT-2007-3384 · Cisco · Cisco Aironet+2

Published 2007-04-12 · Updated 2017-07-29 · CVE-2007-2041

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller (WLC) versions prior to 4.0.206.0

Description The issue affects the Cisco Wireless LAN Controller, which manages Cisco Aironet access points using the Lightweight Access Point Protocol. It could result in a denial of service condition, information disclosure, or access control list changes, potentially allowing an attacker to gain full administrative access or bypass intended access restrictions.

Recommendations For versions prior to 4.0.206.0, update to version 4.0.206.0 or later to resolve the issue. As a temporary workaround, consider implementing available workarounds to mitigate the effects of these vulnerabilities.

Fix

Related Identifiers

CVE-2007-2041

Affected Products

Cisco Aironet

Cisco Wireless Lan Controller

Cisco Wls

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-2041 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2041 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070412-wlc · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml · Vendor Advisory
• http://securitytracker.com/id?1017908 · Note
• http://vupen.com/english/advisories/2007/1368 · Note
• http://securityfocus.com/bid/23461 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33611 · Note
• http://osvdb.org/34138 · Note