Vulnerability record · CVE-2007-0968 · published 16 February 2007

CVE-2007-0968: Cisco firewall services module vulnerability

Cisco · Firewall Services Module

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.

9.0 CVSS 2.0 High EPSS 2.1% · top 18.9%

9.0CVSS 2.0 base score

2.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Firewall Services Module Cisco

References

Link	Tags
http://secunia.com/advisories/24172	Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml	PatchVendor Advisory
http://www.securityfocus.com/bid/22561
http://www.securitytracker.com/id?1017650
http://www.vupen.com/english/advisories/2007/0609
https://exchange.xforce.ibmcloud.com/vulnerabilities/32521
http://secunia.com/advisories/24172	Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml	PatchVendor Advisory
http://www.securityfocus.com/bid/22561
http://www.securitytracker.com/id?1017650
http://www.vupen.com/english/advisories/2007/0609
https://exchange.xforce.ibmcloud.com/vulnerabilities/32521

Track CVE-2007-0968 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2012-0356Cisco firewall services module software improper input validation vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.1%15 Mar 2012 7.8CVE-2011-0394Cisco adaptive security appliance vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8…EPSS 3.4%25 Feb 2011 7.8CVE-2010-2818Cisco firewall services module software vulnerabilityUnspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 befor…EPSS 1.2%9 Aug 2010 7.8CVE-2010-2819Cisco firewall services module software improper input validation vulnerabilityUnspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 befor…EPSS 1.2%9 Aug 2010 7.8CVE-2010-2820Cisco firewall services module software vulnerabilityUnspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 befor…EPSS 1.2%9 Aug 2010 7.8CVE-2010-0151Cisco firewall services module vulnerabilityThe Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adapti…EPSS 2.0%19 Feb 2010 7.8CVE-2009-0638Cisco firewall services module vulnerabilityThe Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cis…EPSS 2.9%21 Aug 2009 7.8CVE-2007-5584Cisco firewall services module vulnerabilityUnspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers to cause a denial of service (device reload) via cr…EPSS 2.0%20 Dec 2007

Source: NIST National Vulnerability Database (record CVE-2007-0968), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.