CVE-2007-0964: Cisco FWSM 3.x before 3.1(3.18), when authentication is configured to use "aaa authentication match" or "aa...

Security readout for executives and security teams

This is a denial-of-service flaw in Cisco FWSM 3.x. If the module uses specific AAA authentication rules, a malformed HTTPS request can reboot the firewall module, interrupting protected network traffic and security enforcement. Exposure is likely limited to organizations still running Cisco FWSM 3.x before 3.1(3.18) with the named AAA authentication configuration enabled. Internet-facing or untrusted HTTPS reachability increases operational risk. Prioritize remediation where FWSM protects critical networks or has untrusted HTTPS exposure. A rebooting firewall can create real service disruption even without data theft. Mitigation focus: Upgrade affected Cisco FWSM software to 3.1(3.18) or later per Cisco guidance.; Review Cisco's advisory for any environment-specific workaround guidance.; Identify and reduce unnecessary HTTPS exposure to affected firewall services..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.