CVE-2007-2039: Medium severity Cisco Wireless LAN Controller Software vulnerability
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2039?
CVE-2007-2039 is classified with a high severity as it allows remote attackers to cause a denial of service.
How do I fix CVE-2007-2039?
To fix CVE-2007-2039, upgrade the Cisco Wireless LAN Controller software to versions 3.2.171.5, 4.0.206.0, or later.
What products are affected by CVE-2007-2039?
CVE-2007-2039 affects Cisco Wireless LAN Controller software versions prior to 3.2.171.5, 4.0.206.0, and 4.1.171.0.
What type of attack does CVE-2007-2039 enable?
CVE-2007-2039 enables remote attackers to conduct denial of service attacks through crafted or malformed network packets.
Is there a workaround for CVE-2007-2039?
There are no specific workarounds for CVE-2007-2039, so it is recommended to apply the software updates.