CVE-2007-2040: Cisco Wireless Lan Controller Software

Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192.

Affected products

• Cisco Wireless Lan Controller Software: from 3.2, before 3.2.185.0 (fixed in 3.2.185.0); from 4.0, before 4.0.206.0 (fixed in 4.0.206.0)

Published 2007-04-16. Last modified 2026-06-16.