CVE-2007-0932 The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest acc...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alcatel-lucent omniaccess wireless | = 43xx | No fix listed |
| alcatel-lucent omniaccess wireless | = 6000 | No fix listed |
| Aruba mobility controller | = 200 | No fix listed |
| Aruba mobility controller | = 800 | No fix listed |
| Aruba mobility controller | = 2400 | No fix listed |
| Aruba mobility controller | = 6000 | No fix listed |
References
- 20070213 Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account mailing-list vendor-advisory
- 33185 vdb-entry
- 24144 third-party-advisory vendor-advisory
- 2243 third-party-advisory
- VU#613833 third-party-advisory us-government-resource
- 20070213 Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account mailing-list
- 22538 vdb-entry
- aruba-guestaccount-privilege-escalation(32461) vdb-entry