Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 2100_wireless_lan_controller | Cisco | * | * |
| 4400_wireless_lan_controller | Cisco | * | * |
References
- http://securitytracker.com/id?1017908
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
- http://www.osvdb.org/34138
- http://www.securityfocus.com/bid/23461
- http://www.vupen.com/english/advisories/2007/1368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33611
- http://securitytracker.com/id?1017908
- http://www.cisco.com/warp/public/707/cisco-sa-20070412-wlc.shtml
- http://www.osvdb.org/34138
- http://www.securityfocus.com/bid/23461
- http://www.vupen.com/english/advisories/2007/1368
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33611