PT-2014-1327 · Cisco · Cisco Ips

Publicado 2014-02-22 · Atualizado 2016-09-08 · CVE-2014-0719

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions prior to 7.1(8p2)E4 Cisco IPS Software versions prior to 7.2(2)E4

Description The issue is related to the control-plane access-list implementation, allowing remote attackers to cause a denial of service by sending crafted packets to TCP port 7000. This results in a MainApp process outage.

Recommendations For versions prior to 7.1(8p2)E4, update to version 7.1(8p2)E4 or later. For versions prior to 7.2(2)E4, update to version 7.2(2)E4 or later. As a temporary workaround, consider restricting access to TCP port 7000 to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-00184

CVE-2014-0719

Produtos afetados

Cisco Ips

Referências · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0719 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00184 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0719 · Nota de Segurança
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCui67394 · Nota