CVE-2007-1257
published 2007-03-03CVE-2007-1257: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets…
PriorityP355critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
6.81%
93.3th percentile
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | catalyst_6000_6500_series_and_cisco_7600_series_nam | — | — |
| cisco | catalyst_6000_ws-svc-nam-1 | — | — |
| cisco | catalyst_6000_ws-svc-nam-2 | — | — |
| cisco | catalyst_6000_ws-x6380-nam | — | — |
| cisco | catalyst_6500_ws-svc-nam-1 | — | — |
| cisco | catalyst_6500_ws-svc-nam-2 | — | — |
| cisco | catalyst_6500_ws-x6380-nam | — | — |
| cisco | catalyst_7600_ws-svc-nam-1 | — | — |
| cisco | catalyst_7600_ws-svc-nam-2 | — | — |
| cisco | catalyst_7600_ws-x6380-nam | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
vendor_cisco·2007-02-28·CVSS 10.0
CVE-2007-1257 [CRITICAL] Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a
Network Analysis Module installed are vulnerable to an attack, which could
allow an attacker to gain complete control of the system. Only Cisco Catalyst
systems that have a NAM on them are affected. This vulnerability affects
systems that run Internetwork Operating System (IOS) or Catalyst Operating
System (CatOS).
Cisco has made free software available to address this vulnerability
for affected customers.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-nam.
Cisco
Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
vendor_cisco
CVE-2007-1257 Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
CVE-2007-1257: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a Network Analysis Module installed are vulnerable to an attack, which could allow an attacker to gain complete control of the system. Only Cisco Catalyst systems that have a NAM on them are affected. This vulnerability affects systems that run Internetwork Operating System (IOS) or Catalyst Operating System (CatOS). Cisco has made free software available to address this vulnerability for affected customers. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-nam .
Bug IDs: CSCsd75273, CSCse52951, CSCsd75273, CSCse52951, CSCse39848
GHSA
GHSA-m2j7-6q7v-wmpq: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP
ghsa_unreviewed·2022-05-01
CVE-2007-1257 [HIGH] CWE-20 GHSA-m2j7-6q7v-wmpq: The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/33066http://secunia.com/advisories/24344http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtmlhttp://www.kb.cert.org/vuls/id/472412http://www.securityfocus.com/bid/22751http://www.securitytracker.com/id?1017710http://www.vupen.com/english/advisories/2007/0783https://exchange.xforce.ibmcloud.com/vulnerabilities/32750https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188http://osvdb.org/33066http://secunia.com/advisories/24344http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtmlhttp://www.kb.cert.org/vuls/id/472412http://www.securityfocus.com/bid/22751http://www.securitytracker.com/id?1017710http://www.vupen.com/english/advisories/2007/0783https://exchange.xforce.ibmcloud.com/vulnerabilities/32750https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188
2007-03-03
Published