Vulnerability in Cisco iOS

CVE-2007-4292

Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP packet, aka (1) CSCsf11855, (2) CSCeb21064, (3) CSCse40276, (4) CSCse68355, (5) CSCsf30058, (6) CSCsb24007, and (7) CSCsc60249.

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.0, 12.1, 12.2
  • N/a — versions n/a

References