CVE-2014-3402
Medium
Description
The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Cisco Intrusion Prevention System
PublishedOct 10, 2014
First seenOct 10, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco intrusion_prevention_system | v ≤ 7.0\(8\)e4, 7.0, 7.0\(1\)e3, 7.0\(2\)e3, 7.0\(2\)e4, 7.0\(3\)e4, 7.0\(4\)e4, 7.0\(5a\)e4, 7.0\(6\)e4, 7.0\(7\)e4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.