Lucene search

K
cve[email protected]CVE-2007-1257
HistoryMar 03, 2007 - 8:19 p.m.

CVE-2007-1257

2007-03-0320:19:00
CWE-20
web.nvd.nist.gov
26
cisco
catalyst
nam
remote code execution
snmp
spoofing
vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%

The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM’s own IP address.

Affected configurations

NVD
Node
cisconetwork_analysis_module
Node
ciscocatalyst_6000_ws-svc-nam-1Match2.2\(1a\)
OR
ciscocatalyst_6000_ws-svc-nam-2Match2.2\(1a\)
OR
ciscocatalyst_6000_ws-x6380-namMatch3.1\(1a\)
OR
ciscocatalyst_6500_ws-svc-nam-1Match2.2\(1a\)
OR
ciscocatalyst_6500_ws-svc-nam-2Match2.2\(1a\)
OR
ciscocatalyst_6500_ws-x6380-namMatch3.1\(1a\)
OR
ciscocatalyst_7600_ws-svc-nam-1Match2.2\(1a\)
OR
ciscocatalyst_7600_ws-svc-nam-2Match2.2\(1a\)
OR
ciscocatalyst_7600_ws-x6380-namMatch3.1\(1a\)

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%