CVE-2007-4012: Cisco Wireless Lan Controller Software

High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service (ARP storm) via a broadcast ARP packet that "targets the IP address of a known client context", aka CSCsj50374.

Affected products

• Cisco Wireless Lan Controller Software: version 3.2 only; version 3.2.116.21 only; version 4.0 only; version 4.0.155.0 only; version 4.1 only

Published 2007-07-26. Last modified 2026-06-16.