« Volver al listado

CVE-2007-5421

Estado: RechazadaSin puntuar—

Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell (Tiny Shell)" attacks. NOTE: the vendor and researcher agree that this issue does not cross privilege boundaries, saying they do not "represent a vulnerability." The disclosure was intended to demonstrate techniques for exploitation, which is not covered by CVE

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

FIRST aún no ha puntuado esta CVE (habitual en CVEs muy recientes o rechazadas).

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Cisco — IOSAICisco — IOS XRAI

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5421",
  "cveTags": [],
  "metrics": {},
  "published": "2007-10-12T21:17:00.000",
  "references": [],
  "vulnStatus": "Rejected",
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the \"Bind Shell\", \"Reverse Shell\", and \"Two byte rootshell (Tiny Shell)\" attacks.  NOTE: the vendor and researcher agree that this issue does not cross privilege boundaries, saying they do not \"represent a vulnerability.\"  The disclosure was intended to demonstrate techniques for exploitation, which is not covered by CVE"
    }
  ],
  "lastModified": "2023-11-07T02:01:18.493",
  "sourceIdentifier": "cve@mitre.org"
}