CVE-2014-2103

Cisco IPS Software is affected by CVE-2014-2103 where the MainApp process can be caused to hang (DoS) by malformed SNMP packets sent to the management interface. This requires SNMP to be enabled and, per advisories, is exploitable remotely by an unauthenticated attacker (for CSCul49309), with som...

PT-2014-4485

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a MainApp process outage, by sending malformed SNMP packets. Recommendation...

CVE-2014-2103: Improper Input Validation

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

CVE-2014-0718

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

CVE-2014-0720

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

Code injection

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

Hardcoded credentials

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

Design/Logic Flaw

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

CVE-2014-0718

Cisco IPS Software is affected by CVE-2014-0718: when the produce-verbose-alert action is enabled, the Analysis Engine can be DoS’d by specially crafted fragmented packets. Affects Cisco IPS Software 7.1 up to 7.1(8)E4 and 7.2 up to 7.2(2)E4. Root cause is improper handling of fragmented packets ...

CVE-2014-0720

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

CVE-2014-0720

Cisco IPS Software is affected by CVE-2014-0720, where unauthenticated remote attackers can cause a denial of service by flooding the device with jumbo frames, leading to an Analysis Engine process outage. The issue is part of multiple DoS vulnerabilities in Cisco IPS Software 7.1/7.2 prior to th...

CVE-2014-0718

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

CVE-2014-0719

Cisco IPS Software contains a denial-of-service vulnerability (CVE-2014-0719) in the control-plane MainApp. The flaw arises from improper handling of malformed TCP packets sent to the management interface on port 7000, allowing remote unauthenticated attackers to cause the MainApp process outage....

PT-2014-1327

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions prior to 7.18p2E4 Cisco IPS Software versions prior to 7.22E4 Description The issue is related to the control-plane access-list implementation, allowing remote attackers to cause a denial of service by sending craft...

PT-2014-1309

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions 7.1 through 7.18E4 Cisco IPS Software versions 7.2 through 7.22E4 Description The issue allows remote attackers to cause a denial of service, resulting in an Analysis Engine process outage, by utilizing fragmented...

PT-2014-1328

Name of the Vulnerable Software and Affected Versions Cisco IPS Software versions 7.1 before 7.18E4 Cisco IPS Software versions 7.2 before 7.22E4 Description The issue allows remote attackers to cause a denial of service, resulting in an Analysis Engine process outage. This can be achieved by...

CVE-2014-0720: Improper Input Validation

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

CVE-2014-0718: Improper Input Validation

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...