CVE-2007-0932

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-14 · updated 2026-06-16
Weakness: CWE-264

Description

The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.

Affected products

Alcatel-Lucent Omniaccess Wireless: 43xx, 6000
Aruba Mobility Controller: 200, 800, 2400, 6000

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html
http://osvdb.org/33185
http://secunia.com/advisories/24144
http://securityreason.com/securityalert/2243
http://www.kb.cert.org/vuls/id/613833
http://www.securityfocus.com/archive/1/459927/100/0/threaded
http://www.securityfocus.com/bid/22538
https://exchange.xforce.ibmcloud.com/vulnerabilities/32461
http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html
http://osvdb.org/33185
http://secunia.com/advisories/24144
http://securityreason.com/securityalert/2243

Get alerted when CVE-2007-0932 or the next vulnerability affects your stack