PT-2014-1316 · Cisco · Cisco Firewall Services Module (Fwsm)

Publicado 2014-02-22 · Atualizado 2014-02-24 · CVE-2014-0710

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (FWSM) Software versions 3.x before 3.2(28) Cisco Firewall Services Module (FWSM) Software versions 4.x before 4.1(15)

Description A race condition in the cut-through proxy feature of the Cisco Firewall Services Module (FWSM) allows remote attackers to cause a denial of service, resulting in a device reload, by sending specially crafted traffic.

Recommendations For versions 3.x before 3.2(28), update to version 3.2(28) or later to resolve the issue. For versions 4.x before 4.1(15), update to version 4.1(15) or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

BDU:2015-00163

CVE-2014-0710

Produtos afetados

Cisco Firewall Services Module (Fwsm)

Referências · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0710 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00163 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-fwsm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0710 · Nota de Segurança
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuj16824 · Nota