CVE-2007-4286: Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 all...

Security readout for executives and security teams

CVE-2007-4286 affects Cisco IOS NHRP handling. A malformed NHRP packet could crash and restart affected routers, and the CVE description also states arbitrary code execution is possible. For executives, this is most urgent where older Cisco IOS 12.0 through 12.4 devices still support operational WAN or routing functions. Exposure is likely limited to legacy Cisco IOS 12.0 through 12.4 devices where NHRP is enabled or reachable. Organizations with DMVPN, WAN, or older routing infrastructure should prioritize inventory confirmation. Products and versions beyond the CVE description are not established in the supplied evidence. Prioritize as a legacy infrastructure risk with high potential operational impact. Immediate action is inventory and vendor-guided remediation, especially for routers supporting WAN connectivity. Lack of KEV evidence reduces emergency posture, but remote crash and possible code execution keep this above routine patching. Mitigation focus: Identify Cisco IOS 12.0 through 12.4 devices in production and lab networks.; Check Cisco advisory cisco-sa-20070808-nhrp for fixed releases and supported workarounds.; Prioritize routers where NHRP is enabled or reachable from untrusted networks..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.