Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2007-4011: Cisco Wireless LAN Controller can be crashed by crafted ARP request

CVE-2007-4011 · published 19 years ago

Summary

Versions of Cisco Wireless LAN Controller software for the 4100, 4400, Airespace 4000, Catalyst 6500 and 3750 devices that are older than the listed releases can be forced to stop working by a specially crafted network message. An attacker on the same network can send a fake ARP request that triggers a flood of traffic, overwhelming the controller. Update the controller software to the latest version or apply the vendor's recommended patch to stop this from happening.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
cisco	wireless_lan_controller_software	3.2 3.2.116.21 4.0 4.0.155.0 4.1 `cpe:2.3:o:cisco:wireless_lan_controller_software:3.2:::::::*`

Original advisory text

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (traffic amplification or ARP storm) via a crafted unicast ARP request that (1) has a destination MAC address unknown to the Layer-2 infrastructure, aka CSCsj69233; or (2) occurs during Layer-3 roaming across IP subnets, aka CSCsj70841.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.1 High

Exploitation

2% chance of attack within 30 days

Timeline

Published26 Jul 2007

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2007-4011 · NVD

Track software like this

Free during beta