CVE-2007-5568
published 2007-10-18CVE-2007-5568: Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a…
PriorityP429high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
2.18%
80.3th percentile
Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service (device reload) via a crafted MGCP packet, aka CSCsi90468 (appliance) and CSCsi00694 (FWSM).
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | firewall_services_module | <= 3.1\(5\) | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Firewall Services Module
vendor_cisco·2007-10-17·CVSS 7.8
CVE-2007-5568 [HIGH] CWE-399 Multiple Vulnerabilities in Firewall Services Module
Multiple Vulnerabilities in Firewall Services Module
Two crafted packet vulnerabilities exist in the Cisco Firewall Services
Module (FWSM) that may result in a reload of the FWSM. These vulnerabilities
can be triggered during the processing of HTTPS requests, or during the
processing of Media Gateway Control Protocol (MGCP) packets.
A third vulnerability may cause access control list (ACL) entries to
not be evaluated after the access list has been manipulated.
Note: These vulnerabilities are independent of each other; a device may be
affected by one and not by the others.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-fwsm.
Cisco
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
vendor_cisco·2007-10-17·CVSS 7.8
CVE-2007-5568 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Two crafted packet vulnerabilities exist in the Cisco PIX 500 Series
Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance
(ASA) that may result in a reload of the device. These vulnerabilities are
triggered during processing of Media Gateway Control Protocol (MGCP) packets,
or during processing of Transport Layer Security (TLS) traffic that terminates
on the PIX or ASA security appliance.
Note: These vulnerabilities are independent of each other; a device may be
affected by one and not by the other.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-asa.
Cisco
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
vendor_cisco
CVE-2007-5568 Multiple Vulnerabilities in Cisco PIX and ASA Appliance
CVE-2007-5568: Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Two crafted packet vulnerabilities exist in the Cisco PIX 500 Series Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance (ASA) that may result in a reload of the device. These vulnerabilities are triggered during processing of Media Gateway Control Protocol (MGCP) packets, or during processing of Transport Layer Security (TLS) traffic that terminates on the PIX or ASA security appliance. Note: These vulnerabilities are independent of each other; a device may be affected by one and not by the other. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-asa .
CWE: CWE-399, CWE-399
Bug IDs: CSCsi90468, CSCsi00694, CSCsg43276, CS
GHSA
GHSA-729f-q8j5-g2ph: Cisco PIX and ASA appliances with 7
ghsa_unreviewed·2022-05-01
CVE-2007-5568 [HIGH] CWE-20 GHSA-729f-q8j5-g2ph: Cisco PIX and ASA appliances with 7
Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attackers to cause a denial of service (device reload) via a crafted MGCP packet, aka CSCsi90468 (appliance) and CSCsi00694 (FWSM).
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/27193http://secunia.com/advisories/27236http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtmlhttp://www.securityfocus.com/bid/26104http://www.securityfocus.com/bid/26109http://www.securitytracker.com/id?1018825http://www.securitytracker.com/id?1018826http://www.securitytracker.com/id?1018827http://www.vupen.com/english/advisories/2007/3530http://www.vupen.com/english/advisories/2007/3531https://exchange.xforce.ibmcloud.com/vulnerabilities/37257https://exchange.xforce.ibmcloud.com/vulnerabilities/37259http://secunia.com/advisories/27193http://secunia.com/advisories/27236http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtmlhttp://www.securityfocus.com/bid/26104http://www.securityfocus.com/bid/26109http://www.securitytracker.com/id?1018825http://www.securitytracker.com/id?1018826http://www.securitytracker.com/id?1018827http://www.vupen.com/english/advisories/2007/3530http://www.vupen.com/english/advisories/2007/3531https://exchange.xforce.ibmcloud.com/vulnerabilities/37257https://exchange.xforce.ibmcloud.com/vulnerabilities/37259
2007-10-18
Published