CVE-2007-5551: Cisco IOS

High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Affected products

• Cisco IOS: any version

Published 2007-10-18. Last modified 2026-06-16.