CVE-2007-2813: Cisco IOS Transmission Control Protocol

High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or (3) Finished message during an SSL session.

Affected products

• Cisco IOS Transmission Control Protocol: version 12.0t only; version 12.0wc only; version 12.0xe only; version 12.0xh only; version 12.0xi only; version 12.0xk only; …

Published 2007-05-22. Last modified 2026-06-16.