CVE-2007-1258
published 2007-03-03CVE-2007-1258: Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and…
PriorityP420medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
1.04%
59.9th percentile
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | catalyst_6000_6500_and_cisco_7600_series_mpls_packet | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h93v-g3mf-7hjh: Unspecified vulnerability in Cisco IOS 12
ghsa_unreviewed·2022-05-01
CVE-2007-1258 [MEDIUM] GHSA-h93v-g3mf-7hjh: Unspecified vulnerability in Cisco IOS 12
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet.
Cisco
Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
vendor_cisco·2007-02-28·CVSS 3.3
CVE-2007-1258 [LOW] CWE-399 Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System (IOS) are vulnerable to an attack from a Multi Protocol Label Switching (MPLS) packet. Only the systems that are running in Hybrid Mode (Catalyst OS (CatOS) software on the Supervisor Engine and IOS Software on the Multilayer Switch Feature Card (MSFC)) or running with Cisco IOS Software Modularity are affected.
MPLS packets can only be sent from the local network segment.
This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-mpls.
Cisco
Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
vendor_cisco
CVE-2007-1258 Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
CVE-2007-1258: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System (IOS) are vulnerable to an attack from a Multi Protocol Label Switching (MPLS) packet. Only the systems that are running in Hybrid Mode (Catalyst OS (CatOS) software on the Supervisor Engine and IOS Software on the Multilayer Switch Feature Card (MSFC)) or running with Cisco IOS Software Modularity are affected. MPLS packets can only be sent from the local network segment. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070228-mpls .
CWE: CWE-399, CWE-399
Bug IDs: CSCef90002, CSCsd37415, CSCef90002
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/33067http://secunia.com/advisories/24348http://www.cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtmlhttp://www.securitytracker.com/id?1017709http://www.vupen.com/english/advisories/2007/0782https://exchange.xforce.ibmcloud.com/vulnerabilities/32748https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869http://osvdb.org/33067http://secunia.com/advisories/24348http://www.cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtmlhttp://www.securitytracker.com/id?1017709http://www.vupen.com/english/advisories/2007/0782https://exchange.xforce.ibmcloud.com/vulnerabilities/32748https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869
2007-03-03
Published