CVE-2007-5571

Cisco Firewall Services Module 3.1-3.1(6) - Unauthenticated ACL Bypass via Edited Rules

Title source: llm

Description

Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26109

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018825

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/37258

Permissions Required vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/3530

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27236

Scores

EPSS 0.0176

EPSS Percentile 75.7%

Details

CWE

CWE-264

Status published

Products (1)

cisco/firewall_services_module 3.1 - 3.1\(6\)

Published Oct 18, 2007

Tracked Since Feb 18, 2026