CVE-2007-4285
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions...
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
- Record
CVE-2007-4285- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:N/C:P/I:P/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
- Record
CVE-2007-4285- Updated
- 2026-11-02
EUVDEUVD-2007-4268 No score
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
- Record
EUVD-2007-4268- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x2rv-3vgv-5r78 No score
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions...
Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remote attackers to obtain sensitive information (partial packet contents) or cause a denial of service (router or component crash) via crafted IPv6 packets with a Type 0 routing header.
- Record
GHSA-x2rv-3vgv-5r78- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4285 is a high vulnerability (CVSS 9.0) in Cisco Ios, published August 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.83%, the 86th percentile. No source names a fixed version.
References
secunia.com/advisories/26359
cisco.com/en/US/products/products_security_advisory09186a0080899647.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/35906
securitytracker.com/id?1018542
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5840
vupen.com/english/advisories/2007/2819
nvd.nist.gov/vuln/detail/CVE-2007-4285
github.com/advisories/GHSA-x2rv-3vgv-5r78