CVE-2007-0648
UnknownEPSS 3.52%
Last modified
CVE-2007-0648 is a vulnerability of currently unknown severity. Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.. EPSS estimates a 3.52% chance of exploitation in the next 30 days.
Description
Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 12.3\(14\)t |
| Cisco | Ios | 12.3\(14\)t2 |
| Cisco | Ios | 12.3\(14\)t4 |
| Cisco | Ios | 12.3\(14\)t5 |
| Cisco | Ios | 12.3yg |
| Cisco | Ios | 12.3yk |
| Cisco | Ios | 12.3ym |
| Cisco | Ios | 12.3yq |
| Cisco | Ios | 12.3yt |
| Cisco | Ios | 12.3yu |
| Cisco | Ios | 12.3yx |
| Cisco | Ios | 12.4 |
| Cisco | Ios | 12.4\(1\) |
| Cisco | Ios | 12.4\(1b\) |
| Cisco | Ios | 12.4\(1c\) |
| Cisco | Ios | 12.4\(2\)mr |
| Cisco | Ios | 12.4\(2\)mr1 |
| Cisco | Ios | 12.4\(2\)t |
| Cisco | Ios | 12.4\(2\)t1 |
| Cisco | Ios | 12.4\(2\)t2 |
| Cisco | Ios | 12.4\(2\)t3 |
| Cisco | Ios | 12.4\(2\)t4 |
| Cisco | Ios | 12.4\(2\)xa |
| Cisco | Ios | 12.4\(2\)xb |
| Cisco | Ios | 12.4\(2\)xb2 |
| Cisco | Ios | 12.4\(3\) |
| Cisco | Ios | 12.4\(3\)t2 |
| Cisco | Ios | 12.4\(3a\) |
| Cisco | Ios | 12.4\(3b\) |
| Cisco | Ios | 12.4\(3d\) |
| Cisco | Ios | 12.4\(4\)mr |
| Cisco | Ios | 12.4\(4\)t |
| Cisco | Ios | 12.4\(4\)t2 |
| Cisco | Ios | 12.4\(5\) |
| Cisco | Ios | 12.4\(5b\) |
| Cisco | Ios | 12.4\(6\)t |
| Cisco | Ios | 12.4\(6\)t1 |
| Cisco | Ios | 12.4\(7\) |
| Cisco | Ios | 12.4\(7a\) |
| Cisco | Ios | 12.4\(8\) |
| Cisco | Ios | 12.4\(9\)t |
| Cisco | Ios | 12.4mr |
| Cisco | Ios | 12.4sw |
| Cisco | Ios | 12.4t |
| Cisco | Ios | 12.4xa |
| Cisco | Ios | 12.4xb |
| Cisco | Ios | 12.4xc |
| Cisco | Ios | 12.4xd |
| Cisco | Ios | 12.4xe |
| Cisco | Ios | 12.4xg |
Showing 50 of 53 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/23978Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtmlPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/438176Patch, US Government Resource
- http://secunia.com/advisories/23978Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtmlPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/438176Patch, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0648?
Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.
How severe is CVE-2007-0648?
Severity scoring for CVE-2007-0648 is pending analysis. The EPSS model estimates a 3.52% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0648?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0642SQL injection vulnerability in tForum 2.00 in the Raymond BE…
- CVE-2007-0643Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 all…
- CVE-2007-0644Format string vulnerability in Apple Safari 2.0.4 (419.3) al…
- CVE-2007-0645Format string vulnerability in iPhoto 6.0.5 allows remote us…
- CVE-2007-0646Format string vulnerability in iMovie HD 6.0.3, and Safari i…
- CVE-2007-0647Format string vulnerability in Help Viewer 3.0.0 allows remo…
- CVE-2007-0649Variable overwrite vulnerability in interface/globals.php in…
- CVE-2007-0650Buffer overflow in the open_sty function in mkind.c for make…
- CVE-2007-0651Multiple cross-site scripting (XSS) vulnerabilities in MailE…
- CVE-2007-0652Cross-site request forgery (CSRF) vulnerability in MailEnabl…
- CVE-2007-0653Integer overflow in X MultiMedia System (xmms) 1.2.10, and p…
- CVE-2007-0654Integer underflow in X MultiMedia System (xmms) 1.2.10 allow…
Are you affected by CVE-2007-0648?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST