CVE-2007-4286

Cisco IOS <12.5 - Buffer Overflow

Title source: llm

Description

Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Martin Kluge · cdoswindows

https://www.exploit-db.com/exploits/4272

View Code ZIP pw:eip

References (9)

[Vendor Advisory] http://www.cisco.com/en/US/products/products_security_advisory09186a008089963b.shtml

[US Government Resource] http://www.kb.cert.org/vuls/id/201984

[Exploit] http://www.securityfocus.com/bid/25238

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35889

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/475931/100/0/threaded

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5675

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018535

[Third Party Advisory] http://secunia.com/advisories/26360

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2818

Scores

EPSS 0.6338

EPSS Percentile 98.4%

Details

CWE

CWE-119

Status published

Products (5)

cisco/ios 12.0

cisco/ios 12.1

cisco/ios 12.2

cisco/ios 12.3

cisco/ios 12.4

Published Aug 09, 2007

Tracked Since Feb 18, 2026