GCVE - cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:firewall_services_module:2.3:*:*:*:*:*:*:*

part: h version: 2.3 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Firewall Services Module (`ce5ac30b-2d0c-5d4f-a32d-62f7de9aec2f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0638`	vulnerable	2026-06-08 04:51:10.660186	Details available The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages. Published: 2009-08-20T22:00:00.000Z Updated: 2024-08-07T04:40:05.123Z Open on db.gcve.eu Reference links http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml http://www.securityfocus.com/bid/36085 https://exchange.xforce.ibmcloud.com/vulnerabilities/52591 http://securitytracker.com/id?1022747 http://secunia.com/advisories/36373	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0968`	vulnerable	2026-06-08 04:49:33.912718	Details available Unspecified vulnerability in Cisco Firewall Services Module (FWSM) before 2.3(4.7) and 3.x before 3.1(3.1) causes the access control entries (ACE) in an ACL to be improperly evaluated, which allows remote authenticated users to bypass intended certain ACL protections. Published: 2007-02-16T00:00:00.000Z Updated: 2024-08-07T12:34:21.354Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/0609 http://www.securityfocus.com/bid/22561 https://exchange.xforce.ibmcloud.com/vulnerabilities/32521 http://www.securitytracker.com/id?1017650 http://secunia.com/advisories/24172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0962`	vulnerable	2026-06-08 04:49:33.910086	Details available Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic. Published: 2007-02-16T00:00:00.000Z Updated: 2024-08-07T12:34:21.308Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/0608 http://secunia.com/advisories/24180 http://www.cisco.com/en/US/products/products_security_advisory09186a00807e2484.shtml http://securitytracker.com/id?1017651 http://www.securityfocus.com/bid/22561	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0515`	vulnerable	2026-06-08 04:48:54.210222	Details available Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734. Published: 2006-05-09T10:00:00.000Z Updated: 2024-08-07T16:41:28.369Z Open on db.gcve.eu Reference links http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html http://www.osvdb.org/25453 http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt http://secunia.com/advisories/20044 http://www.securityfocus.com/bid/17883	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.