CVE-2007-0917

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-14 · updated 2026-06-16

Description

The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.

Affected products

Cisco IOS: 12.3t, 12.3xq, 12.3xr, 12.3xs, 12.3xw, 12.3xx (+19)

References

http://osvdb.org/33052
http://secunia.com/advisories/24142
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml
http://www.cisco.com/en/US/products/products_security_response09186a00807e0a5e.html
http://www.securityfocus.com/bid/22549
http://www.securitytracker.com/id?1017631
http://www.vupen.com/english/advisories/2007/0597
https://exchange.xforce.ibmcloud.com/vulnerabilities/32473
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5858
http://osvdb.org/33052
http://secunia.com/advisories/24142
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e0a5b.shtml

Get alerted when CVE-2007-0917 or the next vulnerability affects your stack