CVE-2007-4011 json
Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 2007…
published 2007-07-26 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3995
- cvss
- 7.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.6%
- EPSS 1.6% chance of exploitation in 30 days, percentile 76%
- public exploits
- 0
- none known
Summary
Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request that (1) has a destination MAC address unknown to the Layer-2 infrastructure, aka CSCsj69233; or (2) occurs during Layer-3 roaming across IP subnets, aka CSCsj70841.
Exploit prediction
1.63% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
References
-
cisco.com
/en/US/products/products_security_advisory09186a008088ab28.shtml
vendor-advisory
-
secunia.com
/advisories/26161
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/2636
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35576
vdb-entry
-
securityfocus.com
/bid/25043
vdb-entry
-
securitytracker.com
/id?1018444
vdb-entry
Sources
- CVE List CVE-2007-4011
- NVD CVE-2007-4011
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.