CVE-2014-2112

High

Published: 27/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The SSL VPN feature in Cisco IOS versions 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the VPN service, potentially leading to downtime in access to organizational resources.

Recommendation

It is recommended to update Cisco IOS to the latest version to mitigate this vulnerability and to monitor HTTP traffic for potential attacks.

Other vulnerabilities in Cisco IOS 15.1 to 15.4

CVE-2016-1347High
The Wide Area Application Services (WAAS) Express implementation in Cisco IOS versions 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment.

Original NVD description (English source)

The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID CSCuf51357.