CVE-2006-4194
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows...
CVE-2006-4194 is a medium vulnerability (CVSS 5.0) in Cisco Pix Firewall 501, published August 17, 2006. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 2.27%, the 83rd percentile.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.27%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
Exploit likelihood
Affected products
What each source reports
NVD Score used
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
CVE-2006-4194- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
CVE-2006-4194- Updated
- 2026-11-02
EUVDEUVD-2006-4184No score
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
- Record
EUVD-2006-4184- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ffgq-wx3w-58gqNo score
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows...
** DISPUTED ** Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue.
- Record
GHSA-ffgq-wx3w-58gq- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/19536
searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html
osvdb.org/29781
idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away
networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5
cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html
nvd.nist.gov/vuln/detail/CVE-2006-4194
github.com/advisories/GHSA-ffgq-wx3w-58gq