CVE-2007-5580

CRITICAL

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execut...

Affects 1 product across 1 vendor.

BCS7.9
CVSS 2.010.0
EPSS6.4%
Percentile93th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

This vulnerability was disclosed in 2007. A critical vulnerability affects Cisco systems (CVE-2007-5580). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2007-GLOBAL-019531-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2007-5580?
This vulnerability was disclosed in 2007. A critical vulnerability affects Cisco systems (CVE-2007-5580). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2007-5580?
CVE-2007-5580 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 6.4%.
Is CVE-2007-5580 actively exploited?
No confirmed active exploitation of CVE-2007-5580 as of 2026-05-30.
How do I remediate CVE-2007-5580?
Priority: MEDIUM. Advisory: http://secunia.com/advisories/27947 PSIRT: [email protected]
What systems are affected by CVE-2007-5580?
CVE-2007-5580 affects: Cisco.
Vulnerability Details
CVE IDCVE-2007-5580
BSIDBS-2007-GLOBAL-019531-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2007-12-15
Last Modified2026-04-23
ICS Relevance70%
Weakness (CWE)
Improper Restriction of Operations within Memory Buffer
Domains
NETWORK-INFRA
SourceNVD
Official Description

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductFixed Version
Cisco Security Agent —
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 6805 Days
CISA KEVNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash960ed9c80e3586bac4a91d1fda35686e023f6bfc3db9e49530f6c7258d9f788852394cd74beec773058ebca827af2fcc84566e79eaf8afa80856af1dc98b650c
Related CVEs affecting Cisco
CVE-2000-1055 10.0 Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote at... CVE-2004-0391 10.0 Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solutio... CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2003-0732 10.0 CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the gues... CVE-2004-1099 10.0 Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure...
View all Cisco CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →