CVE-2015-0654

2015-03-1301:59:33

CWE-362

[email protected]

web.nvd.nist.gov

cisco

ips software

denial of service

cve-2015-0654

tls

security vulnerability

6.7 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

55.9%

JSON

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.

Affected configurations

NVD

Node

ciscointrusion_prevention_systemMatch7.2\(1\)e4

ciscointrusion_prevention_systemMatch7.2\(2\)e4

ciscointrusion_prevention_systemMatch7.3\(2\)e4

CPENameOperatorVersion
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq7.2\(1\)e4
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq7.2\(2\)e4
cisco:intrusion_prevention_systemcisco intrusion prevention systemeq7.3\(2\)e4

CPE	Name	Operator	Version
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	7.2\(1\)e4
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	7.2\(2\)e4
cisco:intrusion_prevention_system	cisco intrusion prevention system	eq	7.3\(2\)e4