← Vulnerability feed

Vulnerability record · CVE-2007-0480 · published 25 January 2007

CVE-2007-0480: Cisco ios transmission control protocol vulnerability

Cisco · Ios Transmission Control Protocol

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.

10.0 CVSS 2.0 High EPSS 9.3% · top 4.8%
10.0CVSS 2.0 base score
9.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1) ICMP, (2) PIMv2, (3) PGM, or (4) URD packet.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/32092
http://secunia.com/advisories/23867
http://securitytracker.com/id?1017555
http://www.cisco.com/en/US/products/products_security_advisory09186a00807cb157.shtml Vendor Advisory
http://www.kb.cert.org/vuls/id/341288 US Government Resource
http://www.securityfocus.com/bid/22211
http://www.us-cert.gov/cas/techalerts/TA07-024A.html US Government Resource
http://www.vupen.com/english/advisories/2007/0329
https://exchange.xforce.ibmcloud.com/vulnerabilities/31725
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5666
http://osvdb.org/32092
http://secunia.com/advisories/23867
http://securitytracker.com/id?1017555
http://www.cisco.com/en/US/products/products_security_advisory09186a00807cb157.shtml Vendor Advisory
http://www.kb.cert.org/vuls/id/341288 US Government Resource
http://www.securityfocus.com/bid/22211
http://www.us-cert.gov/cas/techalerts/TA07-024A.html US Government Resource
http://www.vupen.com/english/advisories/2007/0329
https://exchange.xforce.ibmcloud.com/vulnerabilities/31725
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5666

Track CVE-2007-0480 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2007-2813Cisco ios transmission control protocol vulnerabilityCisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a mal…EPSS 3.4%7.8CVE-2007-0479Cisco ios transmission control protocol vulnerabilityMemory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP tr…EPSS 4.5%7.8CVE-2007-0481Cisco ios transmission control protocol vulnerabilityCisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header.EPSS 4.9%

Source: NIST National Vulnerability Database (record CVE-2007-0480), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.