Improper input validation in Cisco Catalyst 6000 Ws-Svc-Nam-1
CVE-2007-1257
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.068 (93.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Catalyst_6000_ws-svc-nam-1 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_6000_ws-svc-nam-2 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_6000_ws-x6380-nam — versions 3.1\(1a\), 3.1(1a)
- Cisco Catalyst_6500_ws-svc-nam-1 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_6500_ws-svc-nam-2 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_6500_ws-x6380-nam — versions 3.1\(1a\), 3.1(1a)
- Cisco Catalyst_7600_ws-svc-nam-1 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_7600_ws-svc-nam-2 — versions 2.2(1a), 2.2\(1a\)
- Cisco Catalyst_7600_ws-x6380-nam — versions 3.1\(1a\), 3.1(1a)
- Cisco Network_analysis_module
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)