CVE-2007-4012

Published Jul 26, 2007

Last updated 6 years ago

Overview

Description: Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (ARP storm) via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.1
Impact score: 6.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:4100_wireless_lan_controller:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "97790CF3-F428-499C-A175-1DB8380432F0"
          },
          {
            "criteria": "cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "62DD77D6-9809-4B8B-A19F-1D10449C546F"
          },
          {
            "criteria": "cpe:2.3:h:cisco:airespace_4000_wireless_lan_controller:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "824C533A-2951-442A-86FD-BC90DAFEEBF2"
          },
          {
            "criteria": "cpe:2.3:h:cisco:catalyst_3750:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CF73F5A9-F3FB-476D-8309-B1E1E485C44A"
          },
          {
            "criteria": "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "99DE48DF-A309-4A1C-B977-AE81B4EDB589"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CD5A5BFF-E062-4663-B96C-D40DFF899EED"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:3.2.116.21:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3A79CB6-6094-46AC-8574-FF6DC7FB592C"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44884968-081D-4F6B-A325-74D5466052A6"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:4.0.155.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F9E44A7-9C79-4937-B929-D7CD48969D44"
          },
          {
            "criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F3A8DBB-9E82-4428-9034-391F662DFA0B"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References