CVE-2007-3711
UnknownEPSS 2.06%
Last modified
CVE-2007-3711 is a vulnerability of currently unknown severity. Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.. EPSS estimates a 2.06% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| 3com | Tippingpoint Ips Tos | 2.1 |
| 3com | Tippingpoint Ips Tos | 2.1.4.6324 |
| 3com | Tippingpoint Ips Tos | 2.2 |
| 3com | Tippingpoint Ips Tos | 2.2.1 |
| 3com | Tippingpoint Ips Tos | 2.2.1.6506 |
| 3com | Tippingpoint Ips Tos | 2.2.2 |
| 3com | Tippingpoint Ips Tos | 2.2.3 |
| 3com | Tippingpoint Ips Tos | 2.2.4 |
| 3com | Tippingpoint Ips Tos | 2.5 |
| 3com | Tippingpoint Ips Tos | 2.5.1 |
References
- http://secunia.com/advisories/26017Vendor Advisory
- http://www.3com.com/securityalert/alerts/3COM-07-002.htmlVendor Advisory
- http://secunia.com/advisories/26017Vendor Advisory
- http://www.3com.com/securityalert/alerts/3COM-07-002.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3711?
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
How severe is CVE-2007-3711?
Severity scoring for CVE-2007-3711 is pending analysis. The EPSS model estimates a 2.06% probability of exploitation in the next 30 days.
How do I fix CVE-2007-3711?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3705SQL injection vulnerability in FuseTalk 2.0 allows remote at…
- CVE-2007-3706The _sanitize_globals function in CodeIgniter 1.5.3 before 2…
- CVE-2007-3707Directory traversal vulnerability in index.php in CodeIgnite…
- CVE-2007-3708Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.…
- CVE-2007-3709CRLF injection vulnerability in the redirect function in url…
- CVE-2007-3710PHP remote file inclusion vulnerability in example/gamedemo/…
- CVE-2007-3712Multiple cross-site scripting (XSS) vulnerabilities in Hidde…
- CVE-2007-3713Multiple buffer overflows in Konst CenterICQ 4.9.11 through …
- CVE-2007-3714Directory traversal vulnerability in Ada Image Server (ImgSv…
- CVE-2007-3715Sun Java System Application Server and Web Server 7.0 throug…
- CVE-2007-3716The Java XML Digital Signature implementation in Sun JDK and…
- CVE-2007-3717rcp on Sun Solaris 8, 9, and 10 before 20070710 does not pro…
Are you affected by CVE-2007-3711?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST