{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:03:09Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20070214-CVE-2007-0966","slug":"cisco-sa-20070214-cve-2007-0966","vendor":"Cisco","title":"Cisco Firewall Services Module HTTPS Traffic Temporary Denial of Service Vulnerability","summary":"Cisco Firewall Services Module versions versions prior to 3.1(3.11) contain a vulnerability that could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition. The vulnerability is due to an error when the embedded  HTTPS server handles certain types of requests.  An unauthenticated, remote attacker could exploit this vulnerability by submitting crafted HTTPS request directly to the Cisco Firewall Services Module.  This action could cause the device to reload, resulting in a temporary DoS condition. Cisco has confirmed this vulnerability with a security advisory and released updated software. A successful attack allows the attacker to cause the Cisco Firewall Services Module to reload.  The device will automatically restart, allowing the attacker to cause only a temporary DoS condition.  Because the vulnerability requires a malformed HTTPS request, a custom application will be required to exploit the vulnerability.  This makes it unlikely that a standard web browser can be utilized. This vulnerability may also be accidentally exploited by legitimate traffic from a third-party vulnerability scanner.","severity":"Medium","published_at":"2007-02-14T20:43:05Z","updated_at":"2007-02-14T20:43:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0966","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0966/csaf/Cisco-SA-20070214-CVE-2007-0966.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0},"cves":[{"id":"CVE-2007-0966","kev":false}],"public_evidence":[{"product":{"name":"Cisco Firewall Services Module (FWSM)","slug":"cisco-firewall-services-module-fwsm","vendor":"Cisco"},"cve":{"id":"CVE-2007-0966"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:31:42Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Firewall Services Module (FWSM)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2007-02-14T20:43:05Z","updated_at":"2007-02-14T20:43:05Z","advisory_updated_at":"2007-02-14T20:43:05Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20070214-CVE-2007-0966","row_display_order":1}]}