CVE-2007-2040
First published: Mon Apr 16 2007(Updated: )
Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller (WLC) Software | >=3.2<3.2.185.0 | |
| Cisco Wireless LAN Controller (WLC) Software | >=4.0<4.0.206.0 | |
| Cisco Aironet 1000-series | ||
| Cisco Aironet 1500-series |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2007-2040?
The severity of CVE-2007-2040 is considered high due to the presence of a hard-coded password that can allow unauthorized access to the affected devices.
How do I fix CVE-2007-2040?
To fix CVE-2007-2040, upgrade the Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points to firmware version 3.2.185.0 or later, or 4.0.206.0 or later.
Which devices are affected by CVE-2007-2040?
CVE-2007-2040 affects the Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points running versions prior to 3.2.185.0 and 4.0.x versions before 4.0.206.0.
What are the risks associated with CVE-2007-2040?
The risks associated with CVE-2007-2040 include potential unauthorized access and arbitrary actions on the device by anyone with physical access.
Is there a workaround for CVE-2007-2040?
There is no official workaround for CVE-2007-2040; updating the device firmware is recommended to mitigate the vulnerability.
- collector/nvd-historical
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco wireless lan controller (wlc) software
- version/cisco wireless lan controller (wlc) software/3.2
- version/cisco wireless lan controller (wlc) software/4.0
- canonical/cisco aironet 1000-series
- canonical/cisco aironet 1500-series