Lucene search
CiscoCVE-2015-0631HistoryFeb 21, 2015 - 11:59 a.m.
CVE-2015-0631
2015-02-2111:59:04
CWE-362
cisco
web.nvd.nist.gov
22
cisco
ips
ssl implementation
remote attackers
denial of service
management-interface
https connections
key-regeneration phase
upgrade
bug id cscui25688
cve-2015-0631
nvd
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.9
Confidence
High
EPSS
0.006
Percentile
77.8%
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.
Affected configurations
Node
ciscoips_sensor_softwareMatch7.2\(1\)e4
ORciscoips_sensor_softwareMatch7.2\(2\)e4
ciscoids_4210
ORciscoids_4215
ORciscoids_4220
ORciscoids_4230
ORciscoids_4235
ORciscoids_4250
ORciscoids_4250_xl
ORciscoips_4240
ORciscoips_4255
ORciscoips_4260
ORciscoips_4270
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ips_sensor_software | 7.2(1)e4 | cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:*:*:*:*:*:*:* |
| cisco | ips_sensor_software | 7.2(2)e4 | cpe:2.3:a:cisco:ips_sensor_software:7.2\(2\)e4:*:*:*:*:*:*:* |
| cisco | ids_4210 | * | cpe:2.3:h:cisco:ids_4210:*:*:*:*:*:*:*:* |
| cisco | ids_4215 | * | cpe:2.3:h:cisco:ids_4215:*:*:*:*:*:*:*:* |
| cisco | ids_4220 | * | cpe:2.3:h:cisco:ids_4220:*:*:*:*:*:*:*:* |
| cisco | ids_4230 | * | cpe:2.3:h:cisco:ids_4230:*:*:*:*:*:*:*:* |
| cisco | ids_4235 | * | cpe:2.3:h:cisco:ids_4235:*:*:*:*:*:*:*:* |
| cisco | ids_4250 | * | cpe:2.3:h:cisco:ids_4250:*:*:*:*:*:*:*:* |
| cisco | ids_4250_xl | * | cpe:2.3:h:cisco:ids_4250_xl:*:*:*:*:*:*:*:* |
| cisco | ips_4240 | * | cpe:2.3:h:cisco:ips_4240:*:*:*:*:*:*:*:* |
Related
prion
prion
Race condition
2015-02-21 11:59:00
cvelist
cvelist
CVE-2015-0631
2015-02-21 11:00:00
cisco
cisco
nvd
nvd
CVE-2015-0631
2015-02-21 11:59:04
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.9
Confidence
High
EPSS
0.006
Percentile
77.8%
Related for CVE-2015-0631