CVE-2007-0968: Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1)...

Security readout for executives and security teams

This CVE affects Cisco Firewall Services Module software. A flaw in how ACL entries were evaluated could let a remote authenticated user get around intended firewall access-control protections. The issue matters because ACLs are a core enforcement point for network segmentation and policy. Exposure is likely limited to environments still running Cisco FWSM versions older than 2.3(4.7) or 3.1(3.1). This is a legacy firewall module, so current exposure depends on asset inventory and whether old chassis or lab systems remain connected. Treat as a priority for legacy network-risk cleanup. If FWSM is still deployed in protected network paths, remediate promptly because ACL bypass can weaken segmentation and compliance controls. If no FWSM remains, document non-exposure. Mitigation focus: Identify any Cisco FWSM deployments and their software versions.; Upgrade affected 2.3 releases to 2.3(4.7) or later.; Upgrade affected 3.x releases to 3.1(3.1) or later..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.