Unscored severity · published Feb 16, 2007
CVE-2007-0968
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Firewall Services Module · Cisco
2.3; 3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0968
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0968
Vendor Advisory
http://secunia.com/advisories/24172
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/22561
www.securitytracker.com
http://www.securitytracker.com/id?1017650
www.vupen.com
http://www.vupen.com/english/advisories/2007/0609
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32521
More from Firewall Services Module
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2013-1195
The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements…
–
CVE-2013-1193
The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions,…
–
CVE-2012-0356
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before…
–
CVE-2011-0394
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2…