CVE-2007-2039

Published Apr 16, 2007

Last updated 6 years ago

Overview

Description: The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.1
Impact score: 6.9
Exploitability score: 6.5
Vector string: AV:A/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-399

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9A71200B-AF6E-4B81-B204-F6320BD576E1",
            "versionEndExcluding": "3.2.171.5",
            "versionStartIncluding": "3.2"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FE93BEF-E6EC-45B4-8975-6C0C47964602",
            "versionEndExcluding": "4.0.206.0",
            "versionStartIncluding": "4.0"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20DDC3CF-FB18-4377-A0B8-D060A2F027F6",
            "versionEndExcluding": "4.1.171.0",
            "versionStartIncluding": "4.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References