CVE-2007-5571
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce...
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
Exploit likelihood
What each source reports
NVD Score used
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
- Record
CVE-2007-5571- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
- Record
CVE-2007-5571- Updated
- 2026-11-02
EUVDEUVD-2007-5546 No score
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
- Record
EUVD-2007-5546- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvj9-2hjw-96xg No score
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce...
Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536.
- Record
GHSA-rvj9-2hjw-96xg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5571 is a medium vulnerability (CVSS 6.8) in Cisco Firewall Services Module, published October 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. No source names a fixed version.
References
securityfocus.com/bid/26109
cisco.com/en/US/products/products_security_advisory09186a00808dda61.shtml
securitytracker.com/id?1018825
exchange.xforce.ibmcloud.com/vulnerabilities/37258
vupen.com/english/advisories/2007/3530
secunia.com/advisories/27236
nvd.nist.gov/vuln/detail/CVE-2007-5571
github.com/advisories/GHSA-rvj9-2hjw-96xg