CVE Feed

    Dashboard / CVE / CVE-2007-5134

    CVE-2007-5134

    Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.

    Published:Sep 27, 2007
    Last Modified:Apr 23, 2026
    EPS:Sep 27, 2007
    EPSS Score:0.00678
    CVSS Score:5

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 6500
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-svc-nam-1
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-svc-nam-2
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-x6380-nam
    Vendor
    Cisco
    Product
    Catalyst 7600
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-svc-nam-1
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-svc-nam-2
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-x6380-nam
    Vendor
    Cisco
    Product
    Catos

    Exploits

    http://www.securityfocus.com/bid/25822http://www.securityfocus.com/bid/25822

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-12238 (CVSS 6.5) — A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Cataly…
    CVE-2016-6366 (CVSS 8.8) — Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, A…
    CVE-2012-5037 (CVSS 4.6) — The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to c…
    CVE-2014-2124 (CVSS 7.1) — Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, al…
    CVE-2013-1100 (CVSS 5.4) — The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows rem…
    CVE-2012-4661 (CVSS 9) — Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 s…
    CVE-2012-4660 (CVSS 7.8) — The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Service…
    CVE-2012-4663 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4662 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4659 (CVSS 7.1) — The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 ser…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High