PT-2007-6592 · Cisco · Cisco Firewall Services Module

Published 2007-10-18 · Updated 2019-08-01 · CVE-2007-5571

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (FWSM) versions 3.1(6) and 3.2(2) and earlier

Description The issue is related to the improper enforcement of edited ACLs, which could allow remote attackers to bypass intended restrictions on network traffic.

Recommendations For Cisco Firewall Services Module (FWSM) versions 3.1(6) and 3.2(2) and earlier, update to a version that properly enforces edited ACLs to prevent remote attackers from bypassing intended network traffic restrictions.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5571

Affected Products

Cisco Firewall Services Module

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-5571 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml · Vendor Advisory
• http://vupen.com/english/advisories/2007/3530 · Note
• http://securityfocus.com/bid/26109 · Note
• http://secunia.com/advisories/27236 · Note
• http://securitytracker.com/id?1018825 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37258 · Note