CVE-2007-5419

CVE-2007-5419 describes a critical vulnerability in the 3Com 3CRWER100-75 router (software version 1.2.10ww) where enabling an optional virtual server defaults to accepting all source IP addresses on the external interface. This misconfiguration can expose the router to unintended incoming traffic, exemplified by remote attackers accessing the web management interface if a virtual server is set up on port 80. The vulnerability carries a CVSS score of 10.0, indicating maximum severity with an easily exploitable network attack vector requiring no authentication, leading to complete compromise of confidentiality, integrity, and availability. This is further reflected in its high FAUCET Risk Score of 81/100. Despite its critical severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion or media coverage, suggesting a low profile in the threat landscape.