CVE-2007-2038 json
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows rem…
published 2007-04-16 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2033
- cvss
- 6.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 62%
- public exploits
- 0
- none known
Summary
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug ID CSCsg36361.
Exploit prediction
0.98% chance of exploitation in the next 30 days, higher than 62% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.1 | AV:A/AC:L/Au:N/C:N/I:N/A:C |
References
-
cisco.com
/warp/public/707/cisco-sa-20070412-wlc.shtml
vendor-advisory
-
vupen.com
/english/advisories/2007/1368
vdb-entry
-
securitytracker.com
/id?1017908
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/33609
vdb-entry
-
osvdb.org
/34136
vdb-entry
-
securityfocus.com
/bid/23461
vdb-entry
Sources
- CVE List CVE-2007-2038
- NVD CVE-2007-2038
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.