CVE-2007-2039 json
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows rem…
published 2007-04-16 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2034
- cvss
- 6.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 68%
- public exploits
- 0
- none known
Summary
The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attackers on a local wireless network to cause a denial of service (loss of packet forwarding) via (1) crafted SNAP packets, (2) malformed 802.11 traffic, or (3) packets with certain header length values, aka Bug IDs CSCsg15901 and CSCsh10841.
Patch / fix
- cisco wireless_lan_controller_software 3.2.171.5, 4.0.206.0, 4.1.171.0
Exploit prediction
1.21% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.1 | AV:A/AC:L/Au:N/C:N/I:N/A:C |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
cisco.com
/warp/public/707/cisco-sa-20070412-wlc.shtml
vendor-advisory, patch
-
vupen.com
/english/advisories/2007/1368
vdb-entry, third-party-advisory
-
osvdb.org
/34137
vdb-entry, broken-link
-
securitytracker.com
/id?1017908
vdb-entry, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/33609
vdb-entry, third-party-advisory
-
osvdb.org
/34139
vdb-entry, broken-link
-
securityfocus.com
/bid/23461
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2007-2039
- NVD CVE-2007-2039
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.