Lucene search
HistoryFeb 21, 2015 - 11:59 a.m.
CVE-2015-0631
cisco
ips
ssl implementation
remote attackers
denial of service
management-interface
https connections
key-regeneration phase
upgrade
bug id cscui25688
cve-2015-0631
nvd
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.9 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.
Affected configurations
Node
ciscoips_sensor_softwareMatch7.2\(1\)e4
ORciscoips_sensor_softwareMatch7.2\(2\)e4
ciscoids_4210
ORciscoids_4215
ORciscoids_4220
ORciscoids_4230
ORciscoids_4235
ORciscoids_4250
ORciscoids_4250_xl
ORciscoips_4240
ORciscoips_4255
ORciscoips_4260
ORciscoips_4270
Related
cisco
cisco
prion
prion
Race condition
2015-02-21 11:59:00
cvelist
cvelist
CVE-2015-0631
2015-02-21 11:00:00
nvd
nvd
CVE-2015-0631
2015-02-21 11:59:04
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
6.9 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Related for CVE-2015-0631