CVE-2007-2041

high

Description

Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33611

http://www.vupen.com/english/advisories/2007/1368

http://www.securityfocus.com/bid/23461

http://www.osvdb.org/34138

http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml

http://securitytracker.com/id?1017908

Details

Source: Mitre, NVD

Published: 2007-04-16

Updated: 2026-04-23

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High

EPSS

EPSS: 0.00379