Vulnerability Details : CVE-2007-2464

Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."

Vulnerability category: Denial of service

Published 2007-05-02 22:19:00

Updated 2023-08-11 19:02:05

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-2464

Probability of exploitation activity in the next 30 days: 2.06%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 88 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-2464

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	nvd@nist.gov
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-2464

Products affected by CVE-2007-2464

Cisco » PIX
Versions up to, including, (<=) 7.2
cpe:2.3:h:cisco:pix:*:*:*:*:*:*:*:*
Matching versions
Cisco » PIX » Version: 7.1
cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software
Versions up to, including, (<=) 7.2.2
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Matching versions
Cisco » Adaptive Security Appliance Software » Version: 7.1
cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*
Matching versions