Lucene search
+L

1581 matches found

Tenable Nessus
Tenable Nessus
•added 2014/03/14 12:00 a.m.•32 views

Cisco IPS MainApp SNMP DoS (CSCul49309)

A vulnerability in Cisco IPS Software could allow an unauthenticated, remote attacker to cause the MainApp to hang intermittently due to improper handling of SNMP packets sent to the management interface. Note that, in order to for the remote host to be affected by this issue, SNMP must be enable...

6.8CVSS5.5AI score0.01061EPSS
SaveExploits1References3
Cisco
Cisco
•added 2014/03/03 8:58 p.m.•48 views

Cisco IPS MainApp SNMP Denial of Service Vulnerability

A vulnerability in the SNMP code of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause the MainApp process to become unresponsive. This creates a denial of service DoS condition because the Cisco IPS sensor is not able to execute several critic...

6.8CVSS6.8AI score0.01061EPSS
SaveExploits1References1
NVD
NVD
•added 2014/02/27 8:55 p.m.•24 views

CVE-2014-2103

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

6.8CVSS6.6AI score0.01061EPSS
SaveExploits1References1
Prion
Prion
•added 2014/02/27 8:55 p.m.•25 views

Design/Logic Flaw

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

6.8CVSS7.2AI score0.01061EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2014/02/27 8:00 p.m.•60 views

CVE-2014-2103

Cisco IPS Software is affected by CVE-2014-2103 where the MainApp process can be caused to hang (DoS) by malformed SNMP packets sent to the management interface. This requires SNMP to be enabled and, per advisories, is exploitable remotely by an unauthenticated attacker (for CSCul49309), with som...

6.8CVSS6.8AI score0.01061EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/27 12:00 a.m.•3 views

CVE-2014-2103: Improper Input Validation

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

6.8CVSS5.8AI score0.01061EPSS
SaveExploits1References2
NVD
NVD
•added 2014/02/22 9:55 p.m.•26 views

CVE-2014-0718

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

7.1CVSS6.5AI score0.01661EPSS
SaveExploits1References1
NVD
NVD
•added 2014/02/22 9:55 p.m.•26 views

CVE-2014-0720

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

7.1CVSS6.5AI score0.01169EPSS
SaveExploits1References1
NVD
NVD
•added 2014/02/22 9:55 p.m.•27 views

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

7.8CVSS6.5AI score0.01614EPSS
SaveExploits1References1
Prion
Prion
•added 2014/02/22 9:55 p.m.•34 views

Design/Logic Flaw

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

7.1CVSS7.1AI score0.01169EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2014/02/22 9:55 p.m.•26 views

Hardcoded credentials

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

7.8CVSS7.1AI score0.01614EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2014/02/22 9:55 p.m.•28 views

Code injection

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

7.1CVSS7.1AI score0.01661EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/02/22 9:00 p.m.•32 views

CVE-2014-0718

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

6.5AI score0.01661EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2014/02/22 9:00 p.m.•35 views

CVE-2014-0720

Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via a flood of jumbo frames, aka Bug ID CSCuh94944...

6.5AI score0.01169EPSS
SaveExploits1References1
CVE
CVE
•added 2014/02/22 9:00 p.m.•59 views

CVE-2014-0719

Cisco IPS Software contains a denial-of-service vulnerability (CVE-2014-0719) in the control-plane MainApp. The flaw arises from improper handling of malformed TCP packets sent to the management interface on port 7000, allowing remote unauthenticated attackers to cause the MainApp process outage....

7.8CVSS6.7AI score0.01614EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2014/02/22 9:00 p.m.•67 views

CVE-2014-0720

Cisco IPS Software is affected by CVE-2014-0720, where unauthenticated remote attackers can cause a denial of service by flooding the device with jumbo frames, leading to an Analysis Engine process outage. The issue is part of multiple DoS vulnerabilities in Cisco IPS Software 7.1/7.2 prior to th...

7.1CVSS6.7AI score0.01169EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2014/02/22 9:00 p.m.•77 views

CVE-2014-0718

Cisco IPS Software is affected by CVE-2014-0718: when the produce-verbose-alert action is enabled, the Analysis Engine can be DoS’d by specially crafted fragmented packets. Affects Cisco IPS Software 7.1 up to 7.1(8)E4 and 7.2 up to 7.2(2)E4. Root cause is improper handling of fragmented packets ...

7.1CVSS6.7AI score0.01661EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2014/02/22 9:00 p.m.•43 views

CVE-2014-0719

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

6.5AI score0.01614EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/22 12:00 a.m.•6 views

CVE-2014-0718: Improper Input Validation

The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.18E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service Analysis Engine process outage via fragmented packets, aka Bug ID CSCui91266...

7.1CVSS5.8AI score0.01661EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/22 12:00 a.m.•4 views

CVE-2014-0719: Undefined Security Weakness

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

7.8CVSS5.7AI score0.01614EPSS
SaveExploits1References2
Rows per page
Query Builder