Unscored severity · published Oct 18, 2007
CVE-2007-5571
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Firewall Services Module · Cisco
3.1 through 3.1\(6\); 3.2 through 3.2\(2\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5571
Third Party Advisory
http://secunia.com/advisories/27236
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml
Third Party Advisory
http://www.securityfocus.com/bid/26109
Third Party Advisory
http://www.securitytracker.com/id?1018825
Permissions Required
http://www.vupen.com/english/advisories/2007/3530
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/37258
More from Firewall Services Module
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
–
CVE-2013-1195
The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements…
–
CVE-2013-1193
The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions,…
–
CVE-2012-0356
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 7.0 through 7.2 before…
–
CVE-2011-0394
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2…