ID CVE-2007-2041
Summary Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 29-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:N
refmap via4
bid 23461
cisco 20070412 Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points
osvdb 34138
sectrack 1017908
vupen ADV-2007-1368
xf cisco-wlc-acl-weak-security(33611)
Last major update 29-07-2017 - 01:31
Published 16-04-2007 - 21:19
Last modified 29-07-2017 - 01:31
Back to Top