Vulnerability Details : CVE-2007-0962

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.

Vulnerability category: Denial of service

Published 2007-02-16 00:28:00

Updated 2018-10-30 16:25:19

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-0962

Probability of exploitation activity in the next 30 days: 3.60%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 90 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-0962

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-0962

Products affected by CVE-2007-0962

Cisco » Firewall Services Module » Version: 2.3
cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*
Matching versions
Cisco » Firewall Services Module » Version: 3.1
cpe:2.3:h:cisco:firewall_services_module:3.1:*:*:*:*:*:*:*
Matching versions
Cisco » Asa 5500 » Version: 7.0
cpe:2.3:h:cisco:asa_5500:7.0:*:*:*:*:*:*:*
Matching versions
Cisco » Asa 5500 » Version: 7.1
cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
Matching versions
Cisco » Pix Firewall Software » Version: 7.0
cpe:2.3:o:cisco:pix_firewall_software:7.0:*:*:*:*:*:*:*
Matching versions
Cisco » Pix Firewall Software » Version: 7.1
cpe:2.3:o:cisco:pix_firewall_software:7.1:*:*:*:*:*:*:*
Matching versions