CVE-2007-2688 : The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Se

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Published 2007-05-16 01:19:00

Updated 2018-10-30 16:26:17

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-2688

Cisco » IOS » Version: 12.0
cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.0s
cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.0t
cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 11.1cc
cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 11.3
cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.1
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.1t
cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.0st
cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.2
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.1e
cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 12.2t
cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 10.0
cpe:2.3:o:cisco:ios:10.0:*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.0(2)
cpe:2.3:a:cisco:ips_sensor_software:5.0\(2\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.0(1)
cpe:2.3:a:cisco:ips_sensor_software:5.0\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1e)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1e\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(p1)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(p1\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1c)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1c\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1d)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1d\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1a)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1a\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.1(1b)
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1b\):*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 5.0(6)p1
cpe:2.3:a:cisco:ips_sensor_software:5.0\(6\)p1:*:*:*:*:*:*:*
Matching versions
Cisco » Ips Sensor Software » Version: 4.0
cpe:2.3:a:cisco:ips_sensor_software:4.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-2688

EPSS FAQ

5.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2688

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-2688

Jump to

Vulnerability Details : CVE-2007-2688

Products affected by CVE-2007-2688

Exploit prediction scoring system (EPSS) score for CVE-2007-2688

CVSS scores for CVE-2007-2688

References for CVE-2007-2688