CVE-2007-5571

Published: Oct 18, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.

Affected (2)

Products: Cisco: Firewall Services Module

Cisco

1 product

Firewall Services Module

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Firewall Services Module	From 3.1 to 3.1\(6\)
Cisco Firewall Services Module	From 3.2 to 3.2\(2\)

Related CWEs

CWE-264

References (12)

http://secunia.com/advisories/27236

Source: cve@mitre.org

Third Party Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/26109

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018825

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/3530

Source: cve@mitre.org

Permissions Required

https://exchange.xforce.ibmcloud.com/vulnerabilities/37258

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/27236