CVE-2007-0961

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-16 · updated 2026-06-16

Description

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.

Affected products

Cisco Asa 5500: 6.3, 7.0, 7.1, 7.2
Cisco Pix Firewall Software: 6.3, 7.0, 7.1, 7.2

References

http://osvdb.org/33054
http://secunia.com/advisories/24160
http://secunia.com/advisories/24179
http://secunia.com/advisories/24180
http://securitytracker.com/id?1017651
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml
http://www.kb.cert.org/vuls/id/430969
http://www.securityfocus.com/bid/22561
http://www.securityfocus.com/bid/22562
http://www.securitytracker.com/id?1017652
http://www.vupen.com/english/advisories/2007/0608

Get alerted when CVE-2007-0961 or the next vulnerability affects your stack