Cisco IOS Transmission Control Protocol vulnerabilities

4 CVEs affecting Cisco IOS Transmission Control Protocol, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2813, published 2007-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0480, published 2007-01-25. High severity, CVSS 10.0. EPSS: 9.3% chance of exploitation in the next 30 days. Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a (1)…
CVE-2007-0481, published 2007-01-25. High severity, CVSS 7.8. EPSS: 4.9% chance of exploitation in the next 30 days. Cisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header.
CVE-2007-0479, published 2007-01-25. High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days. Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP traffic to an IPv4 address on the IOS device.
CVE-2007-2813, published 2007-05-22. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause a denial of service via a malformed (1) ClientHello, (2) ChangeCipherSpec, or…