CVE-2007-5549

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-18 · updated 2026-06-16
Weakness: CWE-200

Description

Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information via an unspecified "variation of an IOS command" involving "two different methods", aka CSCsk16129. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Affected products

Cisco IOS: all versions

References

http://osvdb.org/45363
http://www.irmplc.com/index.php/111-Vendor-Alerts
http://osvdb.org/45363
http://www.irmplc.com/index.php/111-Vendor-Alerts

Get alerted when CVE-2007-5549 or the next vulnerability affects your stack