Unscored severity · published Apr 16, 2007
CVE-2007-2039
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
Wireless Lan Controller Software · Cisco
3.2 before 3.2.171.5; 4.0 before 4.0.206.0; 4.1 before 4.1.171.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2039
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2039
Third Party Advisory
http://securitytracker.com/id?1017908
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
Broken Link
http://www.osvdb.org/34137
Broken Link
http://www.osvdb.org/34139
Third Party Advisory
http://www.securityfocus.com/bid/23461
Third Party Advisory
http://www.vupen.com/english/advisories/2007/1368
More from Wireless Lan Controller Software
9.8
CVE-2016-1363
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED)…
9.8
CVE-2015-6314
Cisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via…
8.8
CVE-2019-1797
A vulnerability in the web-based management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to conduct a cross-site…
8.8
CVE-2017-3854
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology
8.6
CVE-2024-20271
A vulnerability in the IP packet processing of Cisco Access Point (AP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…