What’s Vulnerable › Vulnerabilities

CVE-2007-1257

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-03-03 · updated 2026-06-16
• Weakness: CWE-20

Description

The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.

Affected products

• Cisco Catalyst 6000 Ws-Svc-Nam-1: 2.2(1a)
• Cisco Catalyst 6000 Ws-Svc-Nam-2: 2.2(1a)
• Cisco Catalyst 6000 Ws-X6380-Nam: 3.1(1a)
• Cisco Catalyst 6500 Ws-Svc-Nam-1: 2.2(1a)
• Cisco Catalyst 6500 Ws-Svc-Nam-2: 2.2(1a)
• Cisco Catalyst 6500 Ws-X6380-Nam: 3.1(1a)
• Cisco Catalyst 7600 Ws-Svc-Nam-1: 2.2(1a)
• Cisco Catalyst 7600 Ws-Svc-Nam-2: 2.2(1a)
• Cisco Catalyst 7600 Ws-X6380-Nam: 3.1(1a)
• Cisco Network Analysis Module: all versions

References

• http://osvdb.org/33066
• http://secunia.com/advisories/24344
• http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml
• http://www.kb.cert.org/vuls/id/472412
• http://www.securityfocus.com/bid/22751
• http://www.securitytracker.com/id?1017710
• http://www.vupen.com/english/advisories/2007/0783
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32750
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188
• http://osvdb.org/33066
• http://secunia.com/advisories/24344
• http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml

Get alerted when CVE-2007-1257 or the next vulnerability affects your stack