Improper input validation in Cisco Cbos
CVE-2007-4430
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.133 (96.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Cbos — versions 12.1, 12.2
- Cisco Cli
- Cisco Ids
- Cisco Ios — versions 10.0, 10.3, 11.0
- Cisco Ios_xr — versions 2.0, 3.0, 3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CISCO, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)