Unscored severity · published Aug 20, 2007
CVE-2007-4430
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain…
–
CVSS
13.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cbos · Cisco
12.1; 12.2 · source: NVD
CL
Cli · Cisco
All versions, or not specified · source: NVD
ID
Ids · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
10.0; 10.3; 11.0; 11.1; 11.2; 12.0; +4 more · source: NVD
IX
Ios XR · Cisco
2.0; 3.0; 3.1; 3.2; 3.3; 3.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4430
forum.cisco.com
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9
Vendor Advisory
http://secunia.com/advisories/26798
www.cisco.com
http://www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html
www.heise-security.co.uk
http://www.heise-security.co.uk/news/94526/
www.securityfocus.com
http://www.securityfocus.com/bid/25352
www.securitytracker.com
http://www.securitytracker.com/id?1018685
More from Cbos
–
CVE-2002-0886
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2)…
–
CVE-2001-0752
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set
–
CVE-2001-0751
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections
–
CVE-2001-0753
Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain…
–
CVE-2001-0754
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and…