CVEvulnerability
CVE-2007-1257
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.
Affected configurations
• cisco network analysis module
• cisco catalyst 6000 ws-svc-nam-1 2.2\(1a\)
• cisco catalyst 6000 ws-svc-nam-2 2.2\(1a\)
• cisco catalyst 6000 ws-x6380-nam 3.1\(1a\)
• cisco catalyst 6500 ws-svc-nam-1 2.2\(1a\)
• cisco catalyst 6500 ws-svc-nam-2 2.2\(1a\)
• cisco catalyst 6500 ws-x6380-nam 3.1\(1a\)
• cisco catalyst 7600 ws-svc-nam-1 2.2\(1a\)
• cisco catalyst 7600 ws-svc-nam-2 2.2\(1a\)
• cisco catalyst 7600 ws-x6380-nam 3.1\(1a\)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/33066 osvdb.org
- http://secunia.com/advisories/24344 Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/472412 US Government Resource
- http://www.securityfocus.com/bid/22751 www.securityfocus.com
- http://www.securitytracker.com/id?1017710 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0783 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32750 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188 oval.cisecurity.org
- http://osvdb.org/33066 osvdb.org
- http://secunia.com/advisories/24344 Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/472412 US Government Resource
- http://www.securityfocus.com/bid/22751 www.securityfocus.com
- http://www.securitytracker.com/id?1017710 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0783 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32750 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188 oval.cisecurity.org