CVE-2014-3402
Cisco Intrusion Prevention System < 7.0(8)E4 - Denial of Service via Crafted Connection Request
Title source: llmDescription
The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=36014
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3402
Scores
EPSS
0.0135
EPSS Percentile
67.9%
Details
CWE
CWE-287
Status
published
Products (10)
cisco/intrusion_prevention_system
7.0
cisco/intrusion_prevention_system
7.0\(1\)e3
cisco/intrusion_prevention_system
7.0\(2\)e3
cisco/intrusion_prevention_system
7.0\(2\)e4
cisco/intrusion_prevention_system
7.0\(3\)e4
cisco/intrusion_prevention_system
7.0\(4\)e4
cisco/intrusion_prevention_system
7.0\(5a\)e4
cisco/intrusion_prevention_system
7.0\(6\)e4
cisco/intrusion_prevention_system
7.0\(7\)e4
cisco/intrusion_prevention_system
< 7.0\(8\)e4
Published
Oct 10, 2014
Tracked Since
Feb 18, 2026