PT-2014-1316 · Cisco · Cisco Firewall Services Module (Fwsm)

Published 2014-02-22 · Updated 2014-02-24 · CVE-2014-0710

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (FWSM) Software versions 3.x before 3.2(28) Cisco Firewall Services Module (FWSM) Software versions 4.x before 4.1(15)

Description A race condition in the cut-through proxy feature of the Cisco Firewall Services Module (FWSM) allows remote attackers to cause a denial of service, resulting in a device reload, by sending specially crafted traffic.

Recommendations For versions 3.x before 3.2(28), update to version 3.2(28) or later to resolve the issue. For versions 4.x before 4.1(15), update to version 4.1(15) or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2015-00163

CVE-2014-0710

Affected Products

Cisco Firewall Services Module (Fwsm)

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0710 · Security Note
• https://bdu.fstec.ru/vul/2015-00163 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-fwsm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0710 · Security Note
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuj16824 · Note