kbrain

CVE-2007-5419

HIGH · CVSS 10.0EPSS 2.2%EU EUVD

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface.

Key facts

CVSS score
10.0 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-16
EPSS score
2.2% (82th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2007-5395)
Published
October 12, 2007
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-5395 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • 3com / 3crwe554g72t

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain