CVE-2007-4285 in the critical feed json
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remo…
published 19y ago modified 4mo ago also EUVD-2007-4268
- cvss
- 9.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.8%
- EPSS 2.8% chance of exploitation in 30 days, percentile 86%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
Patch / fix
Is CVE-2007-4285 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerExploit prediction
2.83% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-14).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:N/C:P/I:P/A:C |
Classification
- Technology feeds
References
-
cisco.com
/en/US/products/products_security_advisory09186a0080899647.shtml
vendor-advisory, patch
-
secunia.com
/advisories/26359
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/2819
vdb-entry, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35906
vdb-entry
-
securitytracker.com
/id?1018542
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5840
vdb-entry, signature
Sources
- CVE List CVE-2007-4285
- NVD CVE-2007-4285
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.