« Volver al listado

CVE-2007-5569

Estado: ModificadaAlta (7.1)—

Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Adaptive Security ApplianceCisco — Adaptive Security Appliance SoftwareCisco — PIX 500

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5569",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-10-18T21:17:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/27193",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26104",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018826",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018827",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3531",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37260",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/27193",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda56.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26104",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018826",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018827",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3531",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37260",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120."
    },
    {
      "lang": "es",
      "value": "Cisco PIX y ASA appliances con software 7.1 y 7.2, cuando se configura para sesiones TLS en el dispositivo, permite a atacantes remotos provocar denegación de servicio (recarga de dispositivo) a través de paquetes TLS manipulados, también conocido como CSCsg43276 y CSCsh97120."
    }
  ],
  "lastModified": "2026-06-16T22:46:24.950",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "407FE280-817B-4164-8E70-32A029448E34"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_500:*:7.1_software:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5BD22EB-5815-41EE-8706-27B60DA88F55"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_500:*:7.2_software:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62710520-B1F2-40B0-9CF8-D196DD578D66"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E623855-FB2B-4B8A-85E8-B8DC29A3FBB0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}