Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-7992.
PoCs published by Tate Hansen, John McLeod, Kyle Rainey, including Metasploit module auxiliary/scanner/dlsw/dlsw_leak_capture.
AI-analyzed exploit summary This Metasploit auxiliary module scans for and exploits CVE-2014-7992, a Cisco DLSw information disclosure vulnerability. It connects to the target on port 2067, checks for the presence of the vulnerability, and captures leaked packet data.
Description
The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.
Exploits (1)
This Metasploit auxiliary module scans for and exploits CVE-2014-7992, a Cisco DLSw information disclosure vulnerability. It connects to the target on port 2067, checks for the presence of the vulnerability, and captures leaked packet data.