CVE-2006-4194
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows...
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
CVE-2006-4194- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
CVE-2006-4194- Updated
- 2026-11-02
EUVDEUVD-2006-4184 No score
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
EUVD-2006-4184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ffgq-wx3w-58gq No score
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows...
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue.
- Record
GHSA-ffgq-wx3w-58gq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4194 is a medium vulnerability (CVSS 5.0) in Cisco Pix Firewall 501, published August 17, 2006. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 2.27%, the 83rd percentile.
References
securityfocus.com/bid/19536
searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html
osvdb.org/29781
idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away
networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5
cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html
nvd.nist.gov/vuln/detail/CVE-2006-4194
github.com/advisories/GHSA-ffgq-wx3w-58gq