CVE-2007-2036: Critical severity Cisco Wireless LAN Controller Software vulnerability

Published Apr 16, 2007

Updated

The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the default read-only community public, and the default read-write community private, which allows remote attackers to read and modify SNMP variables, aka Bug ID CSCse02384.

Affected Software

1 affected component

Cisco Wireless LAN Controller Software=4.1

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml

Event History

Apr 16, 2007

CVE Published

09:19 PM

Apr 17, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2036?

CVE-2007-2036 is considered to be of high severity due to the potential for unauthorized access and modification of SNMP variables.

How do I fix CVE-2007-2036?

To fix CVE-2007-2036, change the default SNMP community strings to custom values that are unique and secure.

What products are affected by CVE-2007-2036?

CVE-2007-2036 affects Cisco Wireless LAN Controllers running version 4.1 and earlier.

Can CVE-2007-2036 be exploited remotely?

Yes, CVE-2007-2036 can be exploited remotely due to the use of default SNMP community strings.

What type of attack can CVE-2007-2036 facilitate?

CVE-2007-2036 can facilitate attacks that allow remote attackers to read and modify SNMP variables, leading to potential unauthorized access.