CVE-2007-0965: Cisco FWSM 3.x before 3.1(3.2), when authentication is configured to use "aaa authentication match" or "aaa...

Security readout for executives and security teams

This vulnerability can let a remote attacker crash and reboot an affected Cisco Firewall Services Module. Business impact is loss of firewall availability, which can interrupt protected network segments. The issue only applies to specific FWSM 3.x versions and AAA authentication configurations named in the sources. Exposure appears limited to Cisco Firewall Services Module deployments running vulnerable 3.x software before 3.1(3.2) with the named AAA authentication configuration enabled. Treat as a legacy firewall availability risk. It is not evidence-backed as actively exploited, but affected perimeter or segmentation firewalls could reboot under attack, causing business disruption. Mitigation focus: Inventory Cisco FWSM deployments and record software versions.; Identify use of "aaa authentication match" or "aaa authentication include".; Upgrade affected FWSM 3.x systems to 3.1(3.2) or later per Cisco guidance..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.