CVE-2007-0918: Cisco IOS

High severity, CVSS 7.1. EPSS: 3.2% chance of exploitation in the next 30 days.

The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.

Affected products

• Cisco IOS: version 12.3t only; version 12.3xq only; version 12.3xr only; version 12.3xs only; version 12.3xw only; version 12.3xx only; …

Published 2007-02-14. Last modified 2026-06-16.