{"id":"CVE-2007-1257","aliases":["EUVD-2007-1254","GHSA-m2j7-6q7v-wmpq"],"status":"published","title":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote...","description":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07026,"percentile":0.94221,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2007-03-03T20:00:00Z","modified":"2026-06-16T22:37:14Z","products":[{"vendor":"cisco","product":"catalyst_6000_ws-svc-nam-1"},{"vendor":"cisco","product":"catalyst_6000_ws-svc-nam-2"},{"vendor":"cisco","product":"catalyst_6000_ws-x6380-nam"},{"vendor":"cisco","product":"catalyst_6500_ws-svc-nam-1"},{"vendor":"cisco","product":"catalyst_6500_ws-svc-nam-2"},{"vendor":"cisco","product":"catalyst_6500_ws-x6380-nam"},{"vendor":"cisco","product":"catalyst_7600_ws-svc-nam-1"},{"vendor":"cisco","product":"catalyst_7600_ws-svc-nam-2"},{"vendor":"cisco","product":"catalyst_7600_ws-x6380-nam"},{"vendor":"cisco","product":"network_analysis_module"}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/472412","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/0783","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/24344","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/22751","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://osvdb.org/33066","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32750","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1017710","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1257"},{"url":"https://github.com/advisories/GHSA-m2j7-6q7v-wmpq"}],"sources":{"cve":[{"id":"CVE-2007-1257","description":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.","status":"published","published":"2007-03-03T20:00:00Z","modified":"2024-08-07T12:50:35.161Z","updated_at":"2026-11-02T13:33:52.669326Z"}],"euvd":[{"id":"EUVD-2007-1254","description":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.","status":"published","published":"2007-03-03T20:00:00Z","modified":"2024-08-07T12:50:35Z","updated_at":"2026-11-03T01:38:26.725267Z"}],"ghsa":[{"id":"GHSA-m2j7-6q7v-wmpq","title":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote...","description":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.","status":"published","published":"2022-05-01T17:51:44Z","modified":"2023-01-31T05:03:16Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:48:25.922736Z"}],"nvd":[{"id":"CVE-2007-1257","description":"The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.","status":"published","published":"2007-03-03T20:19:00Z","modified":"2026-06-16T22:37:14.54Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:13.98711Z"}]}}