PT-2014-1327 · Cisco · Cisco Ips

Published 2014-02-22 · Updated 2016-09-08 · CVE-2014-0719

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions prior to 7.1(8p2)E4 Cisco IPS Software versions prior to 7.2(2)E4

Description The issue is related to the control-plane access-list implementation, allowing remote attackers to cause a denial of service by sending crafted packets to TCP port 7000. This results in a MainApp process outage.

Recommendations For versions prior to 7.1(8p2)E4, update to version 7.1(8p2)E4 or later. For versions prior to 7.2(2)E4, update to version 7.2(2)E4 or later. As a temporary workaround, consider restricting access to TCP port 7000 to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-00184

CVE-2014-0719

Affected Products

Cisco Ips

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0719 · Security Note
• https://bdu.fstec.ru/vul/2015-00184 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0719 · Security Note
• http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCui67394 · Note