CVEvulnerability
CVE-2007-0648
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Description
Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.
Affected configurations
• cisco ios 12.3\(14\)t
• cisco ios 12.3\(14\)t2
• cisco ios 12.3\(14\)t4
• cisco ios 12.3\(14\)t5
• cisco ios 12.3yg
• cisco ios 12.3yk
• cisco ios 12.3ym
• cisco ios 12.3yq
• cisco ios 12.3yt
• cisco ios 12.3yu
• cisco ios 12.3yx
• cisco ios 12.4
• cisco ios 12.4\(1\)
• cisco ios 12.4\(1b\)
• cisco ios 12.4\(1c\)
• cisco ios 12.4\(2\)mr
• cisco ios 12.4\(2\)mr1
• cisco ios 12.4\(2\)t
• cisco ios 12.4\(2\)t1
• cisco ios 12.4\(2\)t2
• cisco ios 12.4\(2\)t3
• cisco ios 12.4\(2\)t4
• cisco ios 12.4\(2\)xa
• cisco ios 12.4\(2\)xb
• cisco ios 12.4\(2\)xb2
• cisco ios 12.4\(3\)
• cisco ios 12.4\(3\)t2
• cisco ios 12.4\(3a\)
• cisco ios 12.4\(3b\)
• cisco ios 12.4\(3d\)
• cisco ios 12.4\(4\)mr
• cisco ios 12.4\(4\)t
• cisco ios 12.4\(4\)t2
• cisco ios 12.4\(5\)
• cisco ios 12.4\(5b\)
• cisco ios 12.4\(6\)t
• cisco ios 12.4\(6\)t1
• cisco ios 12.4\(7\)
• cisco ios 12.4\(7a\)
• cisco ios 12.4\(8\)
• cisco ios 12.4\(9\)t
• cisco ios 12.4mr
• cisco ios 12.4sw
• cisco ios 12.4t
• cisco ios 12.4xa
• cisco ios 12.4xb
• cisco ios 12.4xc
• cisco ios 12.4xd
• cisco ios 12.4xe
• cisco ios 12.4xg
• cisco ios 12.4xj
• cisco ios 12.4xp
• cisco ios 12.4xt
References
- http://secunia.com/advisories/23978 Vendor Advisory
- http://securitytracker.com/id?1017575 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/438176 Patch, US Government Resource
- http://www.securityfocus.com/bid/22330 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0428 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31990 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5138 oval.cisecurity.org
- http://secunia.com/advisories/23978 Vendor Advisory
- http://securitytracker.com/id?1017575 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-air-20070131-sip.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070131-sip.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/438176 Patch, US Government Resource
- http://www.securityfocus.com/bid/22330 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0428 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31990 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5138 oval.cisecurity.org