VULNERABILITY INTELLIGENCE
CVE-2007-5549
CVSS score2.1 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2007-10-18
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information via an unspecified "variation of an IOS command" involving "two different methods", aka CSCsk16129. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor