Unscored severity · published Mar 3, 2007
CVE-2007-1258
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
Catalyst 6000 · Cisco
All versions, or not specified · source: NVD
C6
Catalyst 6500 · Cisco
All versions, or not specified · source: NVD
C7
Catalyst 7600 · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
12.2(18)sxf4; 12.2sxa; 12.2sxb; 12.2sxd; 12.2sxf · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1258
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1258
osvdb.org
http://osvdb.org/33067
Vendor Advisory
http://secunia.com/advisories/24348
Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1017709
www.vupen.com
http://www.vupen.com/english/advisories/2007/0782
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32748
More from Catalyst 6000
–
CVE-2005-4258
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and…
–
CVE-2001-0895
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that…
–
CVE-2001-0080
Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol…