CVE-2007-1257

critical

Description

The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188

https://exchange.xforce.ibmcloud.com/vulnerabilities/32750

http://www.vupen.com/english/advisories/2007/0783

http://www.securitytracker.com/id?1017710

http://www.securityfocus.com/bid/22751

http://www.kb.cert.org/vuls/id/472412

http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml

http://secunia.com/advisories/24344

http://osvdb.org/33066

Details

Source: Mitre, NVD

Published: 2007-03-03

Updated: 2017-10-11

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H