{"id":"CVE-2007-0962","aliases":["EUVD-2007-0956","GHSA-995f-73jj-h5f7"],"status":"published","title":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1...","description":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02429,"percentile":0.84342,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-02-16T00:00:00Z","modified":"2026-06-16T22:36:39Z","products":[{"vendor":"cisco","product":"asa_5500"},{"vendor":"cisco","product":"firewall_services_module"},{"vendor":"cisco","product":"pix_firewall_software"}],"references":[{"url":"http://www.vupen.com/english/advisories/2007/0608","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/24180","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1017651","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/22561","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32486","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/33055","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22562","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/24160","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1017652","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0962"},{"url":"https://github.com/advisories/GHSA-995f-73jj-h5f7"}],"sources":{"cve":[{"id":"CVE-2007-0962","description":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.","status":"published","published":"2007-02-16T00:00:00Z","modified":"2024-08-07T12:34:21.308Z","updated_at":"2026-11-02T13:34:03.879328Z"}],"euvd":[{"id":"EUVD-2007-0956","description":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.","status":"published","published":"2007-02-16T00:00:00Z","modified":"2024-08-07T12:34:21Z","updated_at":"2026-11-03T01:38:28.235221Z"}],"ghsa":[{"id":"GHSA-995f-73jj-h5f7","title":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1...","description":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.","status":"published","published":"2022-05-01T17:48:53Z","modified":"2023-01-31T05:03:08Z","updated_at":"2026-11-02T14:48:24.574436Z"}],"nvd":[{"id":"CVE-2007-0962","description":"Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when \"inspect http\" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.","status":"published","published":"2007-02-16T00:28:00Z","modified":"2026-06-16T22:36:39.07Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:13.10493Z"}]}}