CVE-2003-1003

CWE-20 — Improper Input ValidationCWE-3994 documents4 sources
Severity
7.8HIGH
EPSS
0.6%
top 30.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco PIX FirewallCisco PIX Firewall Software
Timeline
PublishedJan 5
Latest updateApr 29

Description

Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/pix_firewall6.2.2_.111
▶NVDcisco/pix_firewall_software37 versions+36

Patches

Patch: www.cisco.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7gqp-c7gw-hrpv: Cisco PIX firewall 5↗2022-04-29
▶
CVEList
CVE-2003-1003: Cisco PIX firewall 5↗2003-12-17
▶

📋Vendor Advisories

1
Cisco
Cisco PIX Vulnerabilities↗2003-12-16
▶
CVE-2003-1003 (HIGH CVSS 7.8) | Cisco PIX firewall 5.x.x | cvebase.io