CVE-2007-4294: Medium severity Cisco IOS vulnerability

Published Aug 9, 2007

Updated

Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102.

Affected Software

8 affected components

Cisco IOS=12.0

Cisco IOS=12.1

Cisco IOS=12.2

Cisco IOS=12.3

Cisco IOS=12.4

Cisco Unified Communications Manager=5.0

Cisco Unified Communications Manager=5.1

Cisco Unified Communications Manager=6.0

Event History

Aug 9, 2007

CVE Published

09:17 PM

Data Sourced

09:17 PM

DescriptionWeaknessAffected Software

Aug 10, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4294?

CVE-2007-4294 is rated as critical due to its potential to allow remote code execution.

How do I fix CVE-2007-4294?

To remediate CVE-2007-4294, update Cisco Unified Communications Manager and IOS to the latest patched versions.

Which versions of Cisco software are affected by CVE-2007-4294?

CVE-2007-4294 affects Cisco Unified Communications Manager versions 5.0, 5.1, and 6.0, as well as IOS versions 12.0 through 12.4.

Can CVE-2007-4294 be exploited without authentication?

Yes, CVE-2007-4294 can be exploited remotely without authentication through malformed SIP packets.

What are the potential impacts of CVE-2007-4294?

The exploitation of CVE-2007-4294 could lead to unauthorized access and the execution of arbitrary code on vulnerable systems.