Unscored severity · published Apr 16, 2007
CVE-2007-2041
Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
2W
2100 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
4W
4400 Wireless Lan Controller · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2041
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2041
securitytracker.com
http://securitytracker.com/id?1017908
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
www.osvdb.org
http://www.osvdb.org/34138
www.securityfocus.com
http://www.securityfocus.com/bid/23461
www.vupen.com
http://www.vupen.com/english/advisories/2007/1368
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33611
More from 2100 Wireless Lan Controller
–
CVE-2013-1235
Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of…
–
CVE-2013-1105
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass…
–
CVE-2013-1104
The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted…
–
CVE-2013-1103
Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote attackers to cause a denial of service…
–
CVE-2013-1102
The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0, 7.1 and 7.2 before 7.2.110.0, and 7.3…