Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-5651

Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1 and 12.2 on Cisco switches (Wired EAP devices), and CatOS 6.x through 8.x on Cisco switches allows remote attackers to cause a denial of service (device reload) via a crafted EAP Response Identity packet.

Published

2007-10-23T21:47:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

6.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco catos 6.1 Yes
Operating System cisco catos 6.2 Yes
Operating System cisco catos 6.3 Yes
Operating System cisco catos 6.4 Yes
Operating System cisco catos 7.1 Yes
Operating System cisco catos 7.2 Yes
Operating System cisco catos 7.3 Yes
Operating System cisco catos 7.4 Yes
Operating System cisco catos 7.5 Yes
Operating System cisco catos 7.6 Yes
Operating System cisco catos 8.1 Yes
Operating System cisco catos 8.2 Yes
Operating System cisco catos 8.3 Yes
Operating System cisco catos 8.4 Yes
Operating System cisco catos 8.5 Yes
Operating System cisco ios 12.1 Yes
Operating System cisco ios 12.2 Yes
Operating System cisco ios 12.3ja Yes
Operating System cisco ios 12.3jea Yes
Operating System cisco ios 12.3jeb Yes
Operating System cisco ios 12.3jec Yes
Operating System cisco ios 12.4ja Yes
References