First published: Mon Apr 16 2007(Updated: )
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Wireless LAN Controller (WLC) Software | >=3.2<3.2.171.5 | |
Cisco Wireless LAN Controller (WLC) Software | >=4.0<4.0.206.0 | |
Cisco Wireless LAN Controller (WLC) Software | >=4.1<4.1.171.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-2039 is classified with a high severity as it allows remote attackers to cause a denial of service.
To fix CVE-2007-2039, upgrade the Cisco Wireless LAN Controller software to versions 3.2.171.5, 4.0.206.0, or later.
CVE-2007-2039 affects Cisco Wireless LAN Controller software versions prior to 3.2.171.5, 4.0.206.0, and 4.1.171.0.
CVE-2007-2039 enables remote attackers to conduct denial of service attacks through crafted or malformed network packets.
There are no specific workarounds for CVE-2007-2039, so it is recommended to apply the software updates.