Improper input validation in Cisco Cbos
CVE-2007-4430
Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environments with anonymous telnet and Looking Glass access.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.133 (96.3th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 96.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.133 · newest: 0.133 · change: 0.000
Affected products
- Cisco Cbos — versions 12.1, 12.2
- Cisco Cli
- Cisco Ids
- Cisco iOS — versions 10.0, 10.3, 11.0
- Cisco iOS Xr — versions 2.0, 3.0, 3.1
Weakness classification (CWE)
References
- secunia.com/advisories/26798 (Vendor Advisory, third-party-advisory)
- www.securityfocus.com/bid/25352 (vdb-entry)
- www.securitytracker.com/id (vdb-entry)
- puck.nether.net/pipermail/cisco-nsp/2007-August/043002.html (mailing-list)
- www.heise-security.co.uk/news/94526/
- puck.nether.net/pipermail/cisco-nsp/2007-August/043010.html (mailing-list)
- forum.cisco.com/eforum/servlet/NetProf
- www.cisco.com/en/US/products/products_security_response09186a00808bb91c.html (vendor-advisory)
- www.vupen.com/english/advisories/2007/3136 (vdb-entry, Vendor Advisory)