CVE-2007-1257
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
El Módulo Network Analysis (NAM) del Cisco Catalyst Series 6000, 6500 y 7600 permite a atacantes remotos ejecutar comandos de su elección mediante ciertos paquetes SNMP que son simulados desde la propia dirección IP del NAM.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-03-03 CVE Reserved
- 2007-03-03 CVE Published
- 2024-02-12 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/33066 | Vdb Entry | |
| http://www.kb.cert.org/vuls/id/472412 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/22751 | Vdb Entry | |
| http://www.securitytracker.com/id?1017710 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/0783 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/32750 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/24344 | 2017-10-11 | |
| http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml | 2017-10-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Network Analysis Module Search vendor "Cisco" for product "Network Analysis Module" | * | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6000 Ws-svc-nam-1 Search vendor "Cisco" for product "Catalyst 6000 Ws-svc-nam-1" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 6000 Ws-svc-nam-1" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6000 Ws-svc-nam-2 Search vendor "Cisco" for product "Catalyst 6000 Ws-svc-nam-2" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 6000 Ws-svc-nam-2" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6000 Ws-x6380-nam Search vendor "Cisco" for product "Catalyst 6000 Ws-x6380-nam" | 3.1\(1a\) Search vendor "Cisco" for product "Catalyst 6000 Ws-x6380-nam" and version "3.1\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6500 Ws-svc-nam-1 Search vendor "Cisco" for product "Catalyst 6500 Ws-svc-nam-1" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 6500 Ws-svc-nam-1" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6500 Ws-svc-nam-2 Search vendor "Cisco" for product "Catalyst 6500 Ws-svc-nam-2" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 6500 Ws-svc-nam-2" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 6500 Ws-x6380-nam Search vendor "Cisco" for product "Catalyst 6500 Ws-x6380-nam" | 3.1\(1a\) Search vendor "Cisco" for product "Catalyst 6500 Ws-x6380-nam" and version "3.1\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 7600 Ws-svc-nam-1 Search vendor "Cisco" for product "Catalyst 7600 Ws-svc-nam-1" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 7600 Ws-svc-nam-1" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 7600 Ws-svc-nam-2 Search vendor "Cisco" for product "Catalyst 7600 Ws-svc-nam-2" | 2.2\(1a\) Search vendor "Cisco" for product "Catalyst 7600 Ws-svc-nam-2" and version "2.2\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Catalyst 7600 Ws-x6380-nam Search vendor "Cisco" for product "Catalyst 7600 Ws-x6380-nam" | 3.1\(1a\) Search vendor "Cisco" for product "Catalyst 7600 Ws-x6380-nam" and version "3.1\(1a\)" | - |
Affected
| ||||||