CVE-2007-5134

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-09-27 · updated 2026-06-16
Weakness: CWE-264

Description

Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.

Affected products

Cisco Catalyst 6500: all versions
Cisco Catalyst 6500 Ws-Svc-Nam-1: 2.2(1a), 3.1(1a)
Cisco Catalyst 6500 Ws-Svc-Nam-2: 2.2(1a), 3.1(1a)
Cisco Catalyst 6500 Ws-X6380-Nam: 2.1(2), 3.1(1a)
Cisco Catalyst 7600: all versions
Cisco Catalyst 7600 Ws-Svc-Nam-1: 2.2(1a), 3.1(1a)
Cisco Catalyst 7600 Ws-Svc-Nam-2: 2.2(1a), 3.1(1a)
Cisco Catalyst 7600 Ws-X6380-Nam: 2.1(2), 3.1(1a)
Cisco Catos: 5.4(1), 7.5(1), 7.6(1)

References

Get alerted when CVE-2007-5134 or the next vulnerability affects your stack