← Vulnerability feed

Vulnerability record · CVE-2007-2813 · published 22 May 2007

CVE-2007-2813: Cisco ios transmission control protocol vulnerability

Cisco · Ios Transmission Control Protocol

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

7.8 CVSS 2.0 High EPSS 3.4% · top 11.6%
7.8CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/25361
http://www.cisco.com/en/US/products/products_security_advisory09186a0080847c49.shtml Patch
http://www.osvdb.org/35339
http://www.securityfocus.com/bid/24097
http://www.securitytracker.com/id?1018094
http://www.vupen.com/english/advisories/2007/1910
https://exchange.xforce.ibmcloud.com/vulnerabilities/34432
https://exchange.xforce.ibmcloud.com/vulnerabilities/34436
https://exchange.xforce.ibmcloud.com/vulnerabilities/34442
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5745
http://secunia.com/advisories/25361
http://www.cisco.com/en/US/products/products_security_advisory09186a0080847c49.shtml Patch
http://www.osvdb.org/35339
http://www.securityfocus.com/bid/24097
http://www.securitytracker.com/id?1018094
http://www.vupen.com/english/advisories/2007/1910
https://exchange.xforce.ibmcloud.com/vulnerabilities/34432
https://exchange.xforce.ibmcloud.com/vulnerabilities/34436
https://exchange.xforce.ibmcloud.com/vulnerabilities/34442
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5745

Track CVE-2007-2813 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-0480Cisco ios transmission control protocol vulnerabilityCisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code…EPSS 9.3%7.8CVE-2007-0479Cisco ios transmission control protocol vulnerabilityMemory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP tr…EPSS 4.5%7.8CVE-2007-0481Cisco ios transmission control protocol vulnerabilityCisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header.EPSS 4.9%

Source: NIST National Vulnerability Database (record CVE-2007-2813), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.