CVE-2007-0963: High severity Cisco Firewall Services Module vulnerability

Published Feb 16, 2007

Updated

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.x before 3.1(3.3), when set to log at the "debug" level, allows remote attackers to cause a denial of service (device reboot) by sending packets that are not of a particular protocol such as TCP or UDP, which triggers the reboot during generation of Syslog message 710006.

Affected Software

1 affected component

Cisco Firewall Services Module=3.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml

Event History

Feb 16, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0963?

CVE-2007-0963 is considered a medium severity vulnerability due to its potential to cause a denial of service through device reboot.

How do I fix CVE-2007-0963?

To remediate CVE-2007-0963, upgrade the Cisco Firewall Services Module to version 3.1(3.3) or later.

What systems are affected by CVE-2007-0963?

CVE-2007-0963 affects Cisco Firewall Services Module version 3.1 and earlier versions.

Can CVE-2007-0963 be exploited remotely?

Yes, remote attackers can exploit CVE-2007-0963 by sending specific packets to the affected device.

What type of attack does CVE-2007-0963 facilitate?

CVE-2007-0963 facilitates a denial of service attack by causing the Cisco Firewall Services Module to reboot.