CVE-2007-0932
HIGH · CVSS 7.5EPSS 2.3%EU EUVD
The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN.
Key facts
- CVSS score
- 7.5 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Weakness (CWE)
- CWE-264
- EPSS score
- 2.3% (84th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-0926)
- Published
- February 14, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-0926 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- alcatel-lucent / omniaccess wireless
- alcatel-lucent / omniaccess wireless
- aruba / mobility controller
- aruba / mobility controller
- aruba / mobility controller
- aruba / mobility controller
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052382.html(Vendor Advisory)
- http://osvdb.org/33185
- http://secunia.com/advisories/24144(Vendor Advisory)
- http://securityreason.com/securityalert/2243
- http://www.kb.cert.org/vuls/id/613833(Third Party Advisory, US Government Resource)
- http://www.securityfocus.com/archive/1/459927/100/0/threaded
- http://www.securityfocus.com/bid/22538
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32461
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain