Strix
26.1K

CVE-2007-0917

UnknownEPSS 1.88%

Last modified

CVE-2007-0917 is a vulnerability of currently unknown severity. The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.. EPSS estimates a 1.88% chance of exploitation in the next 30 days.

Description

The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.

Metrics

EPSS Probability
1.88%

76.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
CiscoIos12.3t
CiscoIos12.3xq
CiscoIos12.3xr
CiscoIos12.3xs
CiscoIos12.3xw
CiscoIos12.3xx
CiscoIos12.3xy
CiscoIos12.3ya
CiscoIos12.3yd
CiscoIos12.3yg
CiscoIos12.3yh
CiscoIos12.3yi
CiscoIos12.3yj
CiscoIos12.3yk
CiscoIos12.3ym
CiscoIos12.3yq
CiscoIos12.3ys
CiscoIos12.3yt
CiscoIos12.3yx
CiscoIos12.3yz
CiscoIos12.4
CiscoIos12.4mr
CiscoIos12.4t
CiscoIos12.4xa
CiscoIos12.4xb

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2007-0917?
The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.
How severe is CVE-2007-0917?
Severity scoring for CVE-2007-0917 is pending analysis. The EPSS model estimates a 1.88% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0917?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0917?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST