CVE-2007-4291: Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP p...

Security readout for executives and security teams

CVE-2007-4291 is a denial-of-service issue in Cisco IOS 12.0 through 12.4. Malformed voice-protocol traffic can make affected devices hang or crash, potentially disrupting routing or voice services. The public bundle does not provide a CVSS score or evidence of active exploitation. Exposure is most likely on legacy Cisco IOS devices that process MGCP, H.323, or RTP traffic, especially voice gateways or routers reachable from untrusted networks. Modern environments may have low exposure if IOS 12.x has been retired. Prioritize if the organization still runs Cisco IOS 12.x on voice-facing infrastructure. The business risk is service outage, not data theft. If affected devices are internet-reachable or support critical telephony, remediation should be handled promptly. Mitigation focus: Identify any Cisco IOS 12.0 through 12.4 devices still in service.; Review Cisco advisory guidance for fixed software or supported migration paths.; Restrict MGCP, H.323, and RTP exposure to trusted voice peers only..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.