CVE-2007-3701: 3com Tippingpoint Ips Tos

High severity, CVSS 7.5. EPSS: 8.5% chance of exploitation in the next 30 days.

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Affected products

• 3com Tippingpoint Ips Tos: version 2.1 only; version 2.1.4.6324 only; version 2.2 only; version 2.2.1 only; version 2.2.1.6506 only; version 2.2.2 only; …
• Tippingpoint Tipping Point: version 50 only; version 200 only; version 200e only; version 400 only; version 600e only; version 1200 only; …

Published 2007-07-11. Last modified 2026-06-16.