Is CVE-2007-0961 being actively exploited?

CVE-2007-0961 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-0961?

CVE-2007-0961 has a CVSS 2.0 base score of 7.8 (HIGH).

CVE-2007-0961

HIGH · CVSS 7.8EPSS 3.3%EU EUVD

Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.

Key facts

CVSS score: 7.8 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS score: 3.3% (88th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-0955)
Published: February 16, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-0955 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

cisco / asa 5500
cisco / asa 5500
cisco / asa 5500
cisco / asa 5500
cisco / pix firewall software
cisco / pix firewall software
cisco / pix firewall software
cisco / pix firewall software

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco FTD (NGFW) 7.0 on ASA 5500 and ISA 3000 and FTDv with FMC/FMCv - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11300-2023 - archived
Cisco Intrusion Prevention System Version: Software Version 7.2(1) Components: IPS 4300 and 4500 series sensors (4345, 4360, 4510, and 4520); IPS hardware modules for ASA 5585-X (IPS SSP-10, SSP-20, SSP-40, and SSP-60); and IPS software modules on ASA 5500-X (ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X). - Cisco Systems, Inc. - Common Criteria Certificate Number: 2013/84 - archived

References

http://osvdb.org/33054
http://secunia.com/advisories/24160(Vendor Advisory)
http://secunia.com/advisories/24179
http://secunia.com/advisories/24180(Patch, Vendor Advisory)
http://securitytracker.com/id?1017651(Patch)
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2481.shtml(Patch, Vendor Advisory)
http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml(Patch, Vendor Advisory)
http://www.kb.cert.org/vuls/id/430969(US Government Resource)
http://www.securityfocus.com/bid/22561
http://www.securityfocus.com/bid/22562
http://www.securitytracker.com/id?1017652
http://www.vupen.com/english/advisories/2007/0608
https://exchange.xforce.ibmcloud.com/vulnerabilities/32487
https://exchange.xforce.ibmcloud.com/vulnerabilities/32501

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain