CVE-2007-2813

Published May 22, 2007 CVSS 2.0 · 7.8 High EPSS 3.4% KEV · Not listed
Description
Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-2805 Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 1:49 PM
Reserved
May 22, 2007, 12:00 AM
Status
Modified
Published
May 22, 2007, 7:30 PM
Modified
Jun 16, 2026, 10:40 PM