CVE-2015-0654

High

Published: 13/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A race condition in the TLS implementation in the management interface of Cisco Intrusion Prevention System (IPS) Software before version 7.3(3)E4 allows remote attackers to cause a denial of service by establishing many HTTPS sessions.

Risk Assessment

Attackers can cause process hangs, resulting in system unavailability for users. This can lead to significant disruptions in organizational operations.

Recommendation

It is recommended to update the software to version 7.3(3)E4 or later to mitigate this vulnerability. Additionally, monitoring HTTPS sessions for potential attacks is advisable.

Other vulnerabilities in Cisco Intrusion Prevention System (IPS) Software

CVE-2014-3406High
A race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule.

Original NVD description (English source)

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.