CVE-2007-2039

Опубликовано: 16 апр. 2007

Источник: nvd

CVSS2: 6.1

EPSS Низкий

Описание

The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.

Ссылки

http://securitytracker.com/id?1017908
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
Patch
Vendor Advisory
http://www.osvdb.org/34137
Broken Link
http://www.osvdb.org/34139
Broken Link
http://www.securityfocus.com/bid/23461
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1368
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33609
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1017908
Third Party Advisory
VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
Patch
Vendor Advisory
http://www.osvdb.org/34137
Broken Link
http://www.osvdb.org/34139
Broken Link
http://www.securityfocus.com/bid/23461
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1368
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33609
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*

Версия от 3.2 (включая) до 3.2.171.5 (исключая)

cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.0.206.0 (исключая)

cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*

Версия от 4.1 (включая) до 4.1.171.0 (исключая)

EPSS

Процентиль: 73%

0.00793

Низкий

6.1 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-gp6r-fmm5-g6jw

github

почти 4 года назад

EPSS

Процентиль: 73%

0.00793

Низкий

6.1 Medium

CVSS2

Дефекты

CWE-399