CVE-2007-0648: Cisco IOS

High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allows remote attackers to cause a denial of service (crash) by sending a crafted packet to port 5060/UDP.

Affected products

• Cisco IOS: version 12.3(14)t only; version 12.3(14)t2 only; version 12.3(14)t4 only; version 12.3(14)t5 only; version 12.3yg only; version 12.3yk only; …

Published 2007-02-01. Last modified 2026-06-16.