CVE-2007-0965: Cisco Firewall Services Module

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco FWSM 3.x before 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa authentication include", allows remote attackers to cause a denial of service (device reboot) via a long HTTP request.

Affected products

• Cisco Firewall Services Module: version 3.1 only

Published 2007-02-16. Last modified 2026-06-16.