CVE-2014-0719
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000, aka Bug ID CSCui67394.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | ips_sensor_software | {"endIncluding":"7.1\\(1\\)e4"} | |
| cisco | ips_sensor_software | 7.1\(2\)e4 | |
| cisco | ips_sensor_software | 7.1\(3\)e4 | |
| cisco | ips_sensor_software | 7.1\(4\)e4 | |
| cisco | ips_sensor_software | 7.1\(6\)e4 | |
| cisco | ips_sensor_software | 7.1\(7\)e4 | |
| cisco | ips_sensor_software | 7.1\(8\)e4 | |
| cisco | ips_sensor_software | 7.2\(1\)e4 | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.