CVE-2007-5134 Misconfiguration in n/a
Remote attackers can access unintended internal interfaces on Cisco Catalyst devices due to loopback address exposure, bypassing network segmentation controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-5134?
CVE-2007-5134 is a medium-severity vulnerability in n/a, published on 27 Sep 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended.
Weakness: CWE-264
Which versions are affected by CVE-2007-5134?
It affects 9 products.
Products include Cisco Catalyst 6500, Cisco Catalyst 6500 Ws-Svc-Nam-1, Cisco Catalyst 6500 Ws-Svc-Nam-2, Cisco Catalyst 6500 Ws-X6380-Nam, Cisco Catalyst 7600, Cisco Catalyst 7600 Ws-Svc-Nam-1 and 3 more.
How do I fix CVE-2007-5134?
No fix has been published for CVE-2007-5134 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-5134 being exploited?
There is no known exploitation of CVE-2007-5134 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2j9f-fxq3-5v7w.