Lucene search

[email protected]CVE-2007-4011

HistoryJul 26, 2007 - 12:30 a.m.

CVE-2007-4011

2007-07-2600:30:00

[email protected]

web.nvd.nist.gov

cisco

wlan

cve

security

denial of service

arp

unicast arp

cisco 4100

cisco 4400

airespace 4000

catalyst 6500

catalyst 3750

wlc

nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.9%

JSON

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request that (1) has a destination MAC address unknown to the Layer-2 infrastructure, aka CSCsj69233; or (2) occurs during Layer-3 roaming across IP subnets, aka CSCsj70841.

Affected configurations

NVD

Node

cisco4100_wireless_lan_controller

cisco4400_wireless_lan_controller

ciscoairespace_4000_wireless_lan_controller

ciscocatalyst_3750

ciscocatalyst_6500

AND

ciscowireless_lan_controller_softwareMatch3.2

ciscowireless_lan_controller_softwareMatch3.2.116.21

ciscowireless_lan_controller_softwareMatch4.0

ciscowireless_lan_controller_softwareMatch4.0.155.0

ciscowireless_lan_controller_softwareMatch4.1

CPENameOperatorVersion
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq3.2
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq3.2.116.21
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq4.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq4.0.155.0
cisco:wireless_lan_controller_softwarecisco wireless lan controller softwareeq4.1

CPE	Name	Operator	Version
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	3.2
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	3.2.116.21
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	4.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	4.0.155.0
cisco:wireless_lan_controller_software	cisco wireless lan controller software	eq	4.1

References

secunia.com/advisories/26161

www.cisco.com/en/US/products/products_security_advisory09186a008088ab28.shtml

www.securityfocus.com/bid/25043

www.securitytracker.com/id?1018444

www.vupen.com/english/advisories/2007/2636

exchange.xforce.ibmcloud.com/vulnerabilities/35576

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.9%

JSON

Related for CVE-2007-4011

cvelist1 prion1 nvd1 cisco1