VDB
CVE-2007-0918
CVE-2007-0918
PUBLISHED
CVSS 7.099999904632568 HIGH
The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.
EPSS 3.21% · 87.8th percentile
Risk Scores
CVSS 2.0
7.099999904632568
EPSS Score
3.21%
87.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | ios | *, 12.3xq, 12.3xs |
| n/a | n/a | n/a |
Timeline
- Feb 13, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- 20070213 Multiple IOS IPS Vulnerabilities vendor-advisory
- 24142 third-party-advisory
- 33053 vdb
- 1017631 vdb
- cisco-ios-ips-dos(32474) vdb
- 22549 vdb
- http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html url
- oval:org.mitre.oval:def:5832 vdb
- ADV-2007-0597 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2007-0918 advisory