CVE-2014-0718

2014-02-2221:55:09

CWE-20

cisco

web.nvd.nist.gov

cisco

ips

software

7.1

7.2

denial of service

vulnerability

nvd

cve-2014-0718

bug id cscui91266

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

53.9%

JSON

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via fragmented packets, aka Bug ID CSCui91266.

Affected configurations

Nvd

Node

ciscoips_sensor_softwareMatch7.1\(4\)e4

ciscoips_sensor_softwareMatch7.1\(5\)e4

ciscoips_sensor_softwareMatch7.1\(6\)e4

ciscoips_sensor_softwareMatch7.1\(7\)e4

ciscoips_sensor_softwareMatch7.2\(1\)e4

VendorProductVersionCPE
ciscoips_sensor_software7.1(4)e4cpe:2.3:a:cisco:ips_sensor_software:7.1\(4\)e4:*:*:*:*:*:*:*
ciscoips_sensor_software7.1(5)e4cpe:2.3:a:cisco:ips_sensor_software:7.1\(5\)e4:*:*:*:*:*:*:*
ciscoips_sensor_software7.1(6)e4cpe:2.3:a:cisco:ips_sensor_software:7.1\(6\)e4:*:*:*:*:*:*:*
ciscoips_sensor_software7.1(7)e4cpe:2.3:a:cisco:ips_sensor_software:7.1\(7\)e4:*:*:*:*:*:*:*
ciscoips_sensor_software7.2(1)e4cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ips_sensor_software	7.1(4)e4	cpe:2.3:a:cisco:ips_sensor_software:7.1\(4\)e4:::::::*
cisco	ips_sensor_software	7.1(5)e4	cpe:2.3:a:cisco:ips_sensor_software:7.1\(5\)e4:::::::*
cisco	ips_sensor_software	7.1(6)e4	cpe:2.3:a:cisco:ips_sensor_software:7.1\(6\)e4:::::::*
cisco	ips_sensor_software	7.1(7)e4	cpe:2.3:a:cisco:ips_sensor_software:7.1\(7\)e4:::::::*
cisco	ips_sensor_software	7.2(1)e4	cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:::::::*