Vulnerability in Cisco Pix Firewall 501

CVE-2006-4194

Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue

EPSS: 0.022 (81.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Pix_firewall_501
Cisco Pix_firewall_506
Cisco Pix_firewall_515
Cisco Pix_firewall_515e
Cisco Pix_firewall_520
Cisco Pix_firewall_525
Cisco Pix_firewall_535
Cisco Pix_firewall_software — versions 6.3
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_CISCO, vendor-advisory)