Login Request a demo
Unscored severity · published Sep 27, 2007
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
Catalyst 6500 · Cisco
All versions, or not specified · source: NVD
C6
Catalyst 6500 Ws-svc-nam-1 · Cisco
2.2(1a); 3.1(1a) · source: NVD
C6
Catalyst 6500 Ws-svc-nam-2 · Cisco
2.2(1a); 3.1(1a) · source: NVD
C6
Catalyst 6500 Ws-x6380-nam · Cisco
2.1(2); 3.1(1a) · source: NVD
C7
Catalyst 7600 · Cisco
All versions, or not specified · source: NVD
C7
Catalyst 7600 Ws-svc-nam-1 · Cisco
2.2(1a); 3.1(1a) · source: NVD
C7
Catalyst 7600 Ws-svc-nam-2 · Cisco
2.2(1a); 3.1(1a) · source: NVD
C7
Catalyst 7600 Ws-x6380-nam · Cisco
2.1(2); 3.1(1a) · source: NVD
CA
Catos · Cisco
5.4(1); 7.5(1); 7.6(1) · source: NVD
Affected product
C6
Catalyst 6500
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5134
seclists.org
http://seclists.org/fulldisclosure/2007/Sep/0573.html
secunia.com
http://secunia.com/advisories/26988
securitytracker.com
http://securitytracker.com/id?1018742
Patch
http://www.cisco.com/warp/public/707/cisco-sr-20070926-lb.shtml
Exploit
http://www.securityfocus.com/bid/25822
www.securitytracker.com
http://www.securitytracker.com/id?1018743
More from Catalyst 6500
–
CVE-2012-5037
The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service (device reload) via a "no object-group"…
–
CVE-2014-2124
Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via…
–
CVE-2012-4663
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…
–
CVE-2012-4662
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…
–
CVE-2012-4661
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst…