peter bassill · operator
$ cve CVE-2007-3701 JSON

CVE-2007-3701 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 8.5% (pctl 95)

Patch early

A public exploit exists.

Description

TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS8.48% — more likely to be exploited than 95% of all CVEs
WeaknessCWE-20
On CISA KEVno
Public exploityes
Published2007-07-11
Last modified2026-06-16

Affected (2)

VendorProduct
3comtippingpoint ips tos
tippingpointtipping point

Public exploits

SourceTitleDate
exploit-dbTippingPoint IPS - Unicode Character Detection Bypass2007-07-10

References

→ the Explorer  ·  watch your stack  ·  NVD