CVE-2007-2813

Cisco IOS <= 12.4 - Denial of Service via Malformed SSL Messages

Title source: llm
STIX 2.1

Description

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34442
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018094
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34436
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1910
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25361
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5745
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24097
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34432
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/35339

Scores

EPSS 0.0341
EPSS Percentile 87.6%

Details

Status published
Products (50)
cisco/ios_transmission_control_protocol 12.0t
cisco/ios_transmission_control_protocol 12.0wc
cisco/ios_transmission_control_protocol 12.0xe
cisco/ios_transmission_control_protocol 12.0xh
cisco/ios_transmission_control_protocol 12.0xi
cisco/ios_transmission_control_protocol 12.0xk
cisco/ios_transmission_control_protocol 12.0xl
cisco/ios_transmission_control_protocol 12.0xn
cisco/ios_transmission_control_protocol 12.0xq
cisco/ios_transmission_control_protocol 12.0xr
... and 40 more
Published May 22, 2007
Tracked Since Feb 18, 2026