Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco ASA 5500/PIX 500 may reboot from malformed TCP

CVE-2007-0959 · published 19 years ago
Summary

The Cisco ASA 5500 and PIX 500 firewalls running version 7.2.2 can crash and restart if they receive specially crafted TCP network traffic. This could interrupt network protection and cause downtime. Update the device to a newer software version or disable the affected protocol inspection until a fix is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco asa_5500 7.2\(2\)
cpe:2.3:h:cisco:asa_5500:7.2\(2\):*:*:*:*:*:*:*
cisco pix_firewall_software 7.2\(2\)
cpe:2.3:o:cisco:pix_firewall_software:7.2\(2\):*:*:*:*:*:*:*
Original advisory text
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malform...
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed TCP packets.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Timeline
Published16 Feb 2007
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-0959 · NVD
Track software like this
Free during beta