How severe is CVE-2007-2041?

CVE-2007-2041 has a CVSS 2.0 base score of 4.0, rated medium severity.

Is CVE-2007-2041 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-2041?

CVE-2007-2041 primarily affects Cisco 2100 Wireless Lan Controller. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-2041?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-2041 published?

CVE-2007-2041 was published on 2007-04-16 and last updated on 2026-06-16.

CVE-2007-2041

CVE-2007-2041 is a medium-severity vulnerability in Cisco 2100 Wireless Lan Controller with a CVSS 2.0 base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.0)
EPSS exploit prediction: 1% (66th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Cisco 2100 Wireless Lan Controller
Published: 2007-04-16
Last modified: 2026-06-16

Description

Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.

Frequently asked questions

What is CVE-2007-2041?: Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195.
How severe is CVE-2007-2041?: CVE-2007-2041 has a CVSS 2.0 base score of 4.0, rated medium severity.
Is CVE-2007-2041 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (66th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-2041?: CVE-2007-2041 primarily affects Cisco 2100 Wireless Lan Controller. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-2041?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-2041 published?: CVE-2007-2041 was published on 2007-04-16 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:h:cisco:2100_wireless_lan_controller:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:4400_wireless_lan_controller:*:*:*:*:*:*:*:*

More vulnerabilities in Cisco 2100 Wireless Lan Controller

CVE-2012-0371 — Critical (CVSS 9.3): Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs…
CVE-2013-1105 — Critical (CVSS 9.0): Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3…
CVE-2013-1104 — Critical (CVSS 9.0): The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote…
CVE-2013-1103 — High (CVSS 7.8): Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before…
CVE-2013-1102 — High (CVSS 7.8): The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software…
CVE-2012-0370 — High (CVSS 7.8): Cisco Wireless LAN Controller (WLC) devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.0 and 7.1 before…

All CVEs affecting Cisco 2100 Wireless Lan Controller →