CVE-2007-5569
published 2007-10-18CVE-2007-5569: Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service…
PriorityP426high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.68%
74.6th percentile
Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance | — | — |
| cisco | adaptive_security_appliance_software | — | — |
| cisco | pix_and_asa_appliance | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
vendor_cisco·2007-10-17·CVSS 7.8
CVE-2007-5568 [HIGH] CWE-399 Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Two crafted packet vulnerabilities exist in the Cisco PIX 500 Series
Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance
(ASA) that may result in a reload of the device. These vulnerabilities are
triggered during processing of Media Gateway Control Protocol (MGCP) packets,
or during processing of Transport Layer Security (TLS) traffic that terminates
on the PIX or ASA security appliance.
Note: These vulnerabilities are independent of each other; a device may be
affected by one and not by the other.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-asa.
Cisco
Multiple Vulnerabilities in Cisco PIX and ASA Appliance
vendor_cisco
CVE-2007-5569 Multiple Vulnerabilities in Cisco PIX and ASA Appliance
CVE-2007-5569: Multiple Vulnerabilities in Cisco PIX and ASA Appliance
Two crafted packet vulnerabilities exist in the Cisco PIX 500 Series Security Appliance (PIX) and the Cisco 5500 Series Adaptive Security Appliance (ASA) that may result in a reload of the device. These vulnerabilities are triggered during processing of Media Gateway Control Protocol (MGCP) packets, or during processing of Transport Layer Security (TLS) traffic that terminates on the PIX or ASA security appliance. Note: These vulnerabilities are independent of each other; a device may be affected by one and not by the other. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20071017-asa .
CWE: CWE-399, CWE-399
Bug IDs: CSCsi90468, CSCsi00694, CSCsg43276, CS
GHSA
GHSA-fvmv-3fp8-vgjr: Cisco PIX and ASA appliances with 7
ghsa_unreviewed·2022-05-01
CVE-2007-5569 [HIGH] CWE-20 GHSA-fvmv-3fp8-vgjr: Cisco PIX and ASA appliances with 7
Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/27193http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtmlhttp://www.securityfocus.com/bid/26104http://www.securitytracker.com/id?1018826http://www.securitytracker.com/id?1018827http://www.vupen.com/english/advisories/2007/3531https://exchange.xforce.ibmcloud.com/vulnerabilities/37260http://secunia.com/advisories/27193http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtmlhttp://www.securityfocus.com/bid/26104http://www.securitytracker.com/id?1018826http://www.securitytracker.com/id?1018827http://www.vupen.com/english/advisories/2007/3531https://exchange.xforce.ibmcloud.com/vulnerabilities/37260
2007-10-18
Published