Vulnerability in Cisco Firewall Services Module
CVE-2007-0964
Cisco FWSM 3.x before 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a malformed HTTPS request.
EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Firewall_services_module — versions 3.1
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)