CVE-2007-4012

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-26 · updated 2026-06-16

Description

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (ARP storm) via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374.

Affected products

Cisco Wireless LAN Controller (WLC): 3.2, 3.2.116.21, 4.0, 4.0.155.0, 4.1

References

http://secunia.com/advisories/26161
http://www.cisco.com/en/US/products/products_security_advisory09186a008088ab28.shtml
http://www.securityfocus.com/bid/25043
http://www.securitytracker.com/id?1018444
http://www.vupen.com/english/advisories/2007/2636
https://exchange.xforce.ibmcloud.com/vulnerabilities/35576
https://exchange.xforce.ibmcloud.com/vulnerabilities/44591
http://secunia.com/advisories/26161
http://www.cisco.com/en/US/products/products_security_advisory09186a008088ab28.shtml
http://www.securityfocus.com/bid/25043
http://www.securitytracker.com/id?1018444
http://www.vupen.com/english/advisories/2007/2636

Get alerted when CVE-2007-4012 or the next vulnerability affects your stack