CVE-2007-2039

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.

Metrics

CVSS 2.0 6.1/10AV:A/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1017908Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtmlPatch, Vendor Advisory
http://www.osvdb.org/34137Broken Link
http://www.osvdb.org/34139Broken Link
http://www.securityfocus.com/bid/23461Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1368Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33609Third Party Advisory, VDB Entry
http://securitytracker.com/id?1017908Third Party Advisory, VDB Entry
http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtmlPatch, Vendor Advisory
http://www.osvdb.org/34137Broken Link
http://www.osvdb.org/34139Broken Link
http://www.securityfocus.com/bid/23461Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/1368Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33609Third Party Advisory, VDB Entry

Timeline

Published: Apr 16, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-20406.2Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password CVE-2007-20414.0Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs fro CVE-2007-20426.8Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remot CVE-2007-20437.5Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier module for Mambo an CVE-2007-20447.5PHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attac CVE-2007-20455.0Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumpt CVE-2007-20467.5Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAd CVE-2007-20477.5CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attack CVE-2007-20485.0Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read CVE-2007-20496.8Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote attackers to execute a CVE-2007-20505.0Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local CVE-2007-20515.0Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable.