Read the docs
TI-2007-02599 Aliases CVE-2007-2688GHSA-v42f-h49w-98mp

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not…

Priority LOW 39Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Why it matters now

EPSS 0.02976 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:cisco:ips_sensor_software:4.0:*:*:*:*:*:*:*4.0VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.0\(1\):*:*:*:*:*:*:*5.0(1)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.0\(2\):*:*:*:*:*:*:*5.0(2)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.0\(6\)p1:*:*:*:*:*:*:*5.0(6)p1VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1\):*:*:*:*:*:*:*5.1(1)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1a\):*:*:*:*:*:*:*5.1(1a)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1b\):*:*:*:*:*:*:*5.1(1b)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1c\):*:*:*:*:*:*:*5.1(1c)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1d\):*:*:*:*:*:*:*5.1(1d)VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:5.1\(1e\):*:*:*:*:*:*:*5.1(1e)VulnerableCisco
  • cpe:2.3:a:cisco:ips_sensor_software:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.0\(1\):*:*:*:*:*:*:* Versions 5.0(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.0\(2\):*:*:*:*:*:*:* Versions 5.0(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.0\(6\)p1:*:*:*:*:*:*:* Versions 5.0(6)p1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1\):*:*:*:*:*:*:* Versions 5.1(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1a\):*:*:*:*:*:*:* Versions 5.1(1a) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1b\):*:*:*:*:*:*:* Versions 5.1(1b) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1c\):*:*:*:*:*:*:* Versions 5.1(1c) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1d\):*:*:*:*:*:*:* Versions 5.1(1d) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(1e\):*:*:*:*:*:*:* Versions 5.1(1e) Vulnerable ·Cisco
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:ips_sensor_software:5.1\(p1\):*:*:*:*:*:*:*5.1(p1)VulnerableCisco
cpe:2.3:o:cisco:ios:10.0:*:*:*:*:*:*:*10.0VulnerableCisco
cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:*11.1ccVulnerableCisco
cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*11.3VulnerableCisco
cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*12.0VulnerableCisco
cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*12.0sVulnerableCisco
cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*12.0stVulnerableCisco
cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*12.0tVulnerableCisco
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*12.1VulnerableCisco
cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*12.1eVulnerableCisco
cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*12.1tVulnerableCisco
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*12.2VulnerableCisco
cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*12.2tVulnerableCisco
  • cpe:2.3:a:cisco:ips_sensor_software:5.1\(p1\):*:*:*:*:*:*:* Versions 5.1(p1) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:* Versions 11.1cc Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:* Versions 12.0s Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:* Versions 12.0st Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:* Versions 12.0t Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:* Versions 12.1e Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:* Versions 12.1t Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:* Versions 12.2t Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-2688
  2. 2026-10-03 Alias added: GHSA-v42f-h49w-98mp

References

Advisory 2

Other 4

  • TI-2018-00138 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-09019 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-02977 Improper input validation in Cisco IOS and IOS XE Software KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
  • TI-2017-04499 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
  • TI-2017-04498 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
See all 617 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences