CVE-2007-1257

CWE-20 — Improper Input Validation4 documents4 sources
Severity
10.0CRITICAL
EPSS
3.0%
top 13.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Cisco Catalyst 6000 Ws-svc-nam-1Cisco Catalyst 6000 Ws-svc-nam-2Cisco Catalyst 6000 Ws-x6380-nam+6 more
Timeline
PublishedMar 3
Latest updateMay 1

Description

The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages9 packages

🔴Vulnerability Details

2
GHSA
GHSA-m2j7-6q7v-wmpq: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP↗2022-05-01
▶
CVEList
CVE-2007-1257: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP↗2007-03-03
▶

📋Vendor Advisories

1
Cisco
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability↗2007-02-28
▶
CVE-2007-1257 (CRITICAL CVSS 10) | The Network Analysis Module (NAM) i | cvebase.io