Unscored severity · published Mar 3, 2007
CVE-2007-1257
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed…
–
CVSS
7%
EPSS
No
On KEV
Description
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.0% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
Catalyst 6000 Ws-svc-nam-1 · Cisco
2.2(1a) · source: NVD
C6
Catalyst 6000 Ws-svc-nam-2 · Cisco
2.2(1a) · source: NVD
C6
Catalyst 6000 Ws-x6380-nam · Cisco
3.1(1a) · source: NVD
C6
Catalyst 6500 Ws-svc-nam-1 · Cisco
2.2(1a) · source: NVD
C6
Catalyst 6500 Ws-svc-nam-2 · Cisco
2.2(1a) · source: NVD
C6
Catalyst 6500 Ws-x6380-nam · Cisco
3.1(1a) · source: NVD
C7
Catalyst 7600 Ws-svc-nam-1 · Cisco
2.2(1a) · source: NVD
C7
Catalyst 7600 Ws-svc-nam-2 · Cisco
2.2(1a) · source: NVD
C7
Catalyst 7600 Ws-x6380-nam · Cisco
3.1(1a) · source: NVD
NA
Network Analysis Module · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1257
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1257
osvdb.org
http://osvdb.org/33066
Vendor Advisory
http://secunia.com/advisories/24344
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/472412
www.securityfocus.com
http://www.securityfocus.com/bid/22751
www.securitytracker.com
http://www.securitytracker.com/id?1017710
More from Catalyst 6000 Ws-svc-nam-1
–
CVE-2005-4258
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and…
–
CVE-2004-0551
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and…