CVE-2007-0968: Cisco Firewall Services Module

High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections.

Affected products

• Cisco Firewall Services Module: version 2.3 only; version 3.1 only

Published 2007-02-16. Last modified 2026-06-16.