Unscored severity · published Oct 23, 2007
CVE-2007-5651
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catos · Cisco
6.1; 6.2; 6.3; 6.4; 7.1; 7.2; +9 more · source: NVD
IO
Ios · Cisco
12.1; 12.2; 12.3ja; 12.3jea; 12.3jeb; 12.3jec; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5651
secunia.com
http://secunia.com/advisories/27329
www.cisco.com
http://www.cisco.com/en/US/products/products_security_response09186a00808de8bb.html
www.securityfocus.com
http://www.securityfocus.com/bid/26139
www.securitytracker.com
http://www.securitytracker.com/id?1018842
www.vupen.com
http://www.vupen.com/english/advisories/2007/3566
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/37300
More from Catos
–
CVE-2008-4963
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to…
–
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send…
–
CVE-2006-4775
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of…
–
CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device…
–
CVE-2004-0551
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and…