Unscored severity · published Feb 14, 2007
CVE-2007-0932
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mobility Controller · Aruba
200; 800; 2400; 6000 · source: NVD
OW
Omniaccess Wireless · Alcatel-lucent
43xx; 6000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0932
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html
osvdb.org
http://osvdb.org/33185
Vendor Advisory
http://secunia.com/advisories/24144
securityreason.com
http://securityreason.com/securityalert/2243
Third Party Advisory
http://www.kb.cert.org/vuls/id/613833
www.securityfocus.com
http://www.securityfocus.com/archive/1/459927/100/0/threaded
More from Omniaccess Wireless
–
CVE-2007-0931
Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows…