HIGH🇵🇱 Wersja polska

CVE-2007-3701

CVSS 7.5v2.0pub. 2007-07-11upd. 2026-04-23

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

  • 3com Tippingpoint Ips Tos

    OS
    3Com
    2.12.1.4.63242.22.2.12.2.1.65062.2.22.2.32.2.42.52.5.1

  • Tippingpoint Tipping Point

    APP
    Tippingpoint
    12001200e200200e2400e400505000e600esmsx505x506zpha
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2007-3711HIGH7.5ten sam produkt

Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows ...

CVE-2006-3678MEDIUM5.0ten sam produkt

TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to ...

CVE-2006-0362MEDIUM5.0ten sam produkt

TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow r...

CVE-2001-1291CRITICAL9.8ten sam vendor

The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers w...

CVE-2008-6395HIGH7.8ten sam vendor

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers...