CVE-2007-5571 Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka....
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firewall services module | >= 3.1, <= 3.1\(6\) | No fix listed |
| cisco firewall services module | >= 3.2, <= 3.2\(2\) | No fix listed |
References
- 27236 third-party-advisory
- 20071017 Multiple Vulnerabilities in Firewall Services Module vendor-advisory
- 26109 third-party-advisory vdb-entry
- 1018825 third-party-advisory vdb-entry
- ADV-2007-3530 permissions-required vdb-entry
- cisco-fwsm-ace-security-bypass(37258) third-party-advisory vdb-entry