CVE-2014-0720

2014-02-2221:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ips software

vulnerability

cve-2014-0720

denial of service

analysis engine

nvd

bug id cscuh94944

6.8 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

56.0%

JSON

Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944.

CPENameOperatorVersion
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(4\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(3\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(2\)e4
cisco:ips_sensor_softwarecisco ips sensor softwarele7.1\(1\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.2\(1\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(6\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(7\)e4
cisco:ips_sensor_softwarecisco ips sensor softwareeq7.1\(8\)e4

CPE	Name	Operator	Version
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(4\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(3\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(2\)e4
cisco:ips_sensor_software	cisco ips sensor software	le	7.1\(1\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.2\(1\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(6\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(7\)e4
cisco:ips_sensor_software	cisco ips sensor software	eq	7.1\(8\)e4