CVE-2007-2344

HIGH 7.8CVE-2007-2344 · Published 27/04/2007 · updated 16/06/2026

In short

CVE-2007-2344 is a HIGH (CVSS 7.8) vulnerability affecting netsight console (enterasys), netsight inventory manager (enterasys).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netsight console enterasys	`= 2.1`	No fix yet
netsight inventory manager enterasys	`= 2.1`	No fix yet

Description

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a UDP packet that contains an invalid "packet type" field.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
osvdb.org/34628
secunia.com/advisories/24764 · Patch
enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf · Vendor Advisory
securitytracker.com/id
vupen.com/english/advisories/2007/1271

More vulnerabilities in netsight console

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free