CVE-2007-0917 : The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allo

The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.

Published 2007-02-14 02:28:00

Updated 2017-10-11 01:31:41

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-0917

Cisco » IOS » Version: 12.3t
cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xq
cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yd
cpe:2.3:o:cisco:ios:12.3yd:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xr
cpe:2.3:o:cisco:ios:12.3xr:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xw
cpe:2.3:o:cisco:ios:12.3xw:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yg
cpe:2.3:o:cisco:ios:12.3yg:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xs
cpe:2.3:o:cisco:ios:12.3xs:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xx
cpe:2.3:o:cisco:ios:12.3xx:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3xy
cpe:2.3:o:cisco:ios:12.3xy:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yh
cpe:2.3:o:cisco:ios:12.3yh:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3ya
cpe:2.3:o:cisco:ios:12.3ya:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yj
cpe:2.3:o:cisco:ios:12.3yj:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yk
cpe:2.3:o:cisco:ios:12.3yk:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yi
cpe:2.3:o:cisco:ios:12.3yi:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.4
cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yq
cpe:2.3:o:cisco:ios:12.3yq:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3ys
cpe:2.3:o:cisco:ios:12.3ys:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.4mr
cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yt
cpe:2.3:o:cisco:ios:12.3yt:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.4t
cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.4xa
cpe:2.3:o:cisco:ios:12.4xa:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.4xb
cpe:2.3:o:cisco:ios:12.4xb:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yx
cpe:2.3:o:cisco:ios:12.3yx:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3ym
cpe:2.3:o:cisco:ios:12.3ym:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.3yz
cpe:2.3:o:cisco:ios:12.3yz:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-0917

EPSS FAQ

6.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0917

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2007-0917

Jump to

Vulnerability Details : CVE-2007-0917

Products affected by CVE-2007-0917

Exploit prediction scoring system (EPSS) score for CVE-2007-0917

CVSS scores for CVE-2007-0917

References for CVE-2007-0917