CVE-2014-3406

High

Published: 19/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule.

Risk Assessment

Attackers can exploit this vulnerability to remotely trigger a device reload, leading to service availability interruptions.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor IP traffic for potential attacks.

Other vulnerabilities in Cisco Intrusion Prevention System (IPS) Software

CVE-2015-0654High
A race condition in the TLS implementation in the management interface of Cisco Intrusion Prevention System (IPS) Software before version 7.3(3)E4 allows remote attackers to cause a denial of service by establishing many HTTPS sessions.

Original NVD description (English source)

Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085.