Lucene search

K
cveMitreCVE-2007-2041
HistoryApr 16, 2007 - 9:19 p.m.

CVE-2007-2041

2007-04-1621:19:00
mitre
web.nvd.nist.gov
30
cisco
wlc
wlan
acl
configuration
vulnerability
checksum
bypass
access restrictions
bug id cscse58195
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.021

Percentile

89.4%

Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.

Affected configurations

Nvd
Node
cisco2100_wireless_lan_controller
OR
cisco4400_wireless_lan_controller
VendorProductVersionCPE
cisco2100_wireless_lan_controller*cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
cisco4400_wireless_lan_controller*cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.021

Percentile

89.4%