CVE-2007-2464

EPSS 2.33%
Published 02.05.2007 22:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Pix Version <= 7.2

Cisco ≫ Pix Version7.1

Cisco ≫ Adaptive Security Appliance Software Version <= 7.2.2

Cisco ≫ Adaptive Security Appliance Software Version7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.33%	0.833

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

http://secunia.com/advisories/25109

http://www.cisco.com/en/US/products/products_security_advisory09186a0080833166.shtml

Patch

Vendor Advisory

http://www.securityfocus.com/bid/23768

http://www.vupen.com/english/advisories/2007/1636

http://www.kb.cert.org/vuls/id/337508

US Government Resource

http://www.osvdb.org/35333

https://exchange.xforce.ibmcloud.com/vulnerabilities/34023

https://nvd.nist.gov/vuln/detail/CVE-2007-2464

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2464

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2464

EUVD